{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,27]],"date-time":"2026-04-27T15:31:54Z","timestamp":1777303914367,"version":"3.51.4"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100017607","name":"Shenzhen Fundamental Research Program","doi-asserted-by":"publisher","award":["JCYJ20220818102414030"],"award-info":[{"award-number":["JCYJ20220818102414030"]}],"id":[{"id":"10.13039\/501100017607","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Major Key Project of PCL","award":["PCL2022A03"],"award-info":[{"award-number":["PCL2022A03"]}]},{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies","award":["2022B1212010005"],"award-info":[{"award-number":["2022B1212010005"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2024,2]]},"DOI":"10.1109\/tai.2023.3266419","type":"journal-article","created":{"date-parts":[[2023,4,11]],"date-time":"2023-04-11T13:35:03Z","timestamp":1681220103000},"page":"814-826","source":"Crossref","is-referenced-by-count":3,"title":["Capacity Abuse Attack of Deep Learning Models Without Need of Label Encodings"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8357-1655","authenticated-orcid":false,"given":"Wenjian","family":"Luo","sequence":"first","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Licai","family":"Zhang","sequence":"additional","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7952-7136","authenticated-orcid":false,"given":"Yulin","family":"Wu","sequence":"additional","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chuanyi","family":"Liu","sequence":"additional","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3845-7749","authenticated-orcid":false,"given":"Peiyi","family":"Han","sequence":"additional","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rongfei","family":"Zhuang","sequence":"additional","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2022.103672"},{"key":"ref3","first-page":"17","article-title":"Privacy in pharmacogenetics: An end-to-end case study of personalized warfarin dosing","volume-title":"Proc. 23rd USENIX Secur. Symp.","author":"Fredrikson","year":"2014"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2015.071829"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-019-0197-0"},{"issue":"2017","key":"ref10","first-page":"1","article-title":"The effectiveness of data augmentation in image classification using deep learning","volume":"11","author":"Wang","year":"2017","journal-title":"Convolutional Neural Netw. Vis. Recognit."},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354261"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00033"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3140687"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.3837\/tiis.2021.03.015"},{"key":"ref15","article-title":"Towards measuring membership privacy","author":"Long","year":"2017"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref17","article-title":"Understanding membership inferences on well-generalized learning models","author":"Long","year":"2018"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354211"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2019.2897554"},{"key":"ref20","first-page":"1291","article-title":"Updates-leak: Data set inference and reconstruction attacks in online learning","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Salem","year":"2020"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2021.3076443"},{"key":"ref22","first-page":"1345","article-title":"High accuracy and high fidelity extraction of neural networks","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Jagielski","year":"2020"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-62144-5_4"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833623"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00025"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3446776"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref29","first-page":"265","article-title":"Tensorflow: A system for large-scale machine learning","volume-title":"Proc. 12th USENIX Symp. Operating. Syst. Des. Implementation","author":"Martn","year":"2016"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/MCSE.2011.37"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"ref32","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref33","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.21236\/ADA164453"},{"key":"ref35","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9078688\/10433275\/10098869.pdf?arnumber=10098869","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:08:47Z","timestamp":1755911327000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10098869\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2]]},"references-count":35,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tai.2023.3266419","relation":{},"ISSN":["2691-4581"],"issn-type":[{"value":"2691-4581","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2]]}}}