{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T22:45:31Z","timestamp":1778539531542,"version":"3.51.4"},"reference-count":28,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,7,18]],"date-time":"2021-07-18T00:00:00Z","timestamp":1626566400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,7,18]],"date-time":"2021-07-18T00:00:00Z","timestamp":1626566400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,7,18]],"date-time":"2021-07-18T00:00:00Z","timestamp":1626566400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,7,18]]},"DOI":"10.1109\/ijcnn52387.2021.9534381","type":"proceedings-article","created":{"date-parts":[[2021,9,23]],"date-time":"2021-09-23T22:32:08Z","timestamp":1632436328000},"page":"1-8","source":"Crossref","is-referenced-by-count":16,"title":["EAR: An Enhanced Adversarial Regularization Approach against Membership Inference Attacks"],"prefix":"10.1109","author":[{"given":"Hongsheng","family":"Hu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zoran","family":"Salcic","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gillian","family":"Dobbie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yi","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xuyun","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"},{"key":"ref11","first-page":"587","article-title":"Machine learning models that remember too much","author":"song","year":"2017","journal-title":"CCS"},{"key":"ref12","first-page":"1929","article-title":"Dropout: a simple way to prevent neural networks from overfitting","volume":"15","author":"srivastava","year":"2014","journal-title":"JMLR"},{"key":"ref13","author":"bishop","year":"2006","journal-title":"Pattern Recognition and Machine Learning"},{"key":"ref14","first-page":"259","article-title":"Memguard: Defending against black-box membership inference attacks via adversarial examples","author":"jia","year":"2019","journal-title":"CCS"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref16","first-page":"634","article-title":"Machine learning with membership privacy using adversarial regularization","author":"nasr","year":"2018","journal-title":"CCS"},{"key":"ref17","first-page":"2672","article-title":"Generative adversarial nets","author":"goodfellow","year":"2014","journal-title":"NeurIPS"},{"key":"ref18","author":"zhao","year":"2016","journal-title":"Energy-based Generative Adversarial Network"},{"key":"ref19","author":"arjovsky","year":"2017","journal-title":"Wasserstein GAN"},{"key":"ref28","first-page":"1225","article-title":"Train faster, generalize better: Stability of stochastic gradient descent","author":"hardt","year":"2016","journal-title":"ICML"},{"key":"ref4","first-page":"267","article-title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","author":"carlini","year":"2019","journal-title":"Usenix Security"},{"key":"ref27","first-page":"1895","article-title":"Evaluating differentially private machine learning in practice","author":"jayaraman","year":"2019","journal-title":"Usenix Security"},{"key":"ref3","first-page":"234","article-title":"U-net: Convolutional networks for biomedical image segmentation","author":"ronneberger","year":"2015","journal-title":"MICCAI"},{"key":"ref6","first-page":"619","article-title":"Property inference attacks on fully connected neural networks using permutation invariant representations","author":"ganju","year":"2018","journal-title":"CCS"},{"key":"ref5","first-page":"1322","article-title":"Model inversion attacks that exploit confidence information and basic countermeasures","author":"fredrikson","year":"2015","journal-title":"CCS"},{"key":"ref8","first-page":"1291","article-title":"Updates-leak: Data set inference and reconstruction attacks in online learning","author":"salem","year":"2020","journal-title":"Usenix Security"},{"key":"ref7","first-page":"603","article-title":"Deep models under the gan: information leakage from collaborative deep learning","author":"hitaj","year":"2017","journal-title":"CCS"},{"key":"ref2","author":"devlin","year":"2018","journal-title":"BERT Pre-training of deep bidirectional transformers for language understanding"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref20","author":"karras","year":"2017","journal-title":"Progressive growing of GANs for improved quality stability and variation"},{"key":"ref22","first-page":"308","article-title":"Deep learning with differential privacy","author":"abadi","year":"2016","journal-title":"CCS"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.304"},{"key":"ref24","author":"salem","year":"2018","journal-title":"ML-Leaks Model and data independent membership inference attacks and defenses on machine learning models"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref26","author":"song","year":"2020","journal-title":"Systematic evaluation of privacy risks of machine learning models"},{"key":"ref25","author":"long","year":"2018","journal-title":"Understanding membership inferences on well-generalized learning models"}],"event":{"name":"2021 International Joint Conference on Neural Networks (IJCNN)","location":"Shenzhen, China","start":{"date-parts":[[2021,7,18]]},"end":{"date-parts":[[2021,7,22]]}},"container-title":["2021 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9533266\/9533267\/09534381.pdf?arnumber=9534381","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T15:45:57Z","timestamp":1652197557000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9534381\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,18]]},"references-count":28,"URL":"https:\/\/doi.org\/10.1109\/ijcnn52387.2021.9534381","relation":{},"subject":[],"published":{"date-parts":[[2021,7,18]]}}}