{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,11]],"date-time":"2025-12-11T07:42:23Z","timestamp":1765438943065,"version":"3.37.3"},"reference-count":46,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFC3302300","2021YFC3300600"],"award-info":[{"award-number":["2022YFC3302300","2021YFC3300600"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["92046024","92146002","61873309"],"award-info":[{"award-number":["92046024","92146002","61873309"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100018625","name":"Shanghai Science and Technology Project","doi-asserted-by":"publisher","award":["22510761000"],"award-info":[{"award-number":["22510761000"]}],"id":[{"id":"10.13039\/501100018625","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Intel Sponsored Research Agreement","award":["Intel CG 89533661"],"award-info":[{"award-number":["Intel CG 89533661"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Consumer Electron."],"published-print":{"date-parts":[[2024,2]]},"DOI":"10.1109\/tce.2024.3370764","type":"journal-article","created":{"date-parts":[[2024,2,27]],"date-time":"2024-02-27T19:13:57Z","timestamp":1709061237000},"page":"4168-4177","source":"Crossref","is-referenced-by-count":5,"title":["InvMetrics: Measuring Privacy Risks for Split Model\u2013Based Customer Behavior Analysis"],"prefix":"10.1109","volume":"70","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1663-0464","authenticated-orcid":false,"given":"Ruijun","family":"Deng","sequence":"first","affiliation":[{"name":"School of Computer Science and the Engineering Research Center of Cyber Security Auditing and Monitoring, Ministry of Education, Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-8509-1751","authenticated-orcid":false,"given":"Shijing","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Computer Science and the Engineering Research Center of Cyber Security Auditing and Monitoring, Ministry of Education, Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junxiong","family":"Lin","sequence":"additional","affiliation":[{"name":"School of Computer Science and the Engineering Research Center of Cyber Security Auditing and Monitoring, Ministry of Education, Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jirui","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Computer Science and the Engineering Research Center of Cyber Security Auditing and Monitoring, Ministry of Education, Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5706-7503","authenticated-orcid":false,"given":"Zhihui","family":"Lu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0404-0707","authenticated-orcid":false,"given":"Jie","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6896-3415","authenticated-orcid":false,"given":"Shih-Chia","family":"Huang","sequence":"additional","affiliation":[{"name":"Department of Electronic Engineering, National Taipei University of Technology, Taipei City, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7832-1937","authenticated-orcid":false,"given":"Qiang","family":"Duan","sequence":"additional","affiliation":[{"name":"Information Sciences and Technology Department, Pennsylvania State University, Abington, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380159"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599905"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2019.2918285"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/505"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2020.2987846"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2023.3310046"},{"key":"ref7","first-page":"1","article-title":"Label leakage and protection in two-party split learning","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Li"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3316615"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450051"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.3390\/s22165983"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359824"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583306"},{"key":"ref13","first-page":"2615","article-title":"Systematic evaluation of privacy risks of machine learning models","volume-title":"Proc. 30th USENIX Security Symp. (USENIX Security)","author":"Song"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS60048.2023.00084"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.004.2200381"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SMARTGRID.2010.5622047"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/375551.375602"},{"key":"ref18","article-title":"A survey on federated learning and its applications for accelerating Industrial Internet of Things","author":"Zhou","year":"2021","journal-title":"arXiv:2104.10501"},{"key":"ref19","first-page":"267","article-title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","volume-title":"Proc. 28th USENIX Secur. Symp. (USENIX Security)","author":"Carlini"},{"key":"ref20","first-page":"12855","article-title":"Measuring data reconstruction defenses in collaborative inference systems","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Yang"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378522"},{"key":"ref22","first-page":"1","article-title":"Posthoc privacy guarantees for collaborative inference with modified propose-test-release","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","author":"Singh"},{"key":"ref23","first-page":"3989","article-title":"Exploring the security boundary of data reconstruction via neuron exclusivity analysis","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Security)","author":"Pan"},{"key":"ref24","article-title":"Bounding the invertibility of privacy-preserving instance encoding using fisher information","author":"Maeng","year":"2023","journal-title":"arXiv:2305.04146"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3168389"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583450"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2023.3330864"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"ref29","first-page":"760","article-title":"Measuring data leakage in machine-learning models with fisher information","volume-title":"Proc. 37th Uncertain. Artif. Intell.","author":"Hannun"},{"key":"ref30","first-page":"8056","article-title":"Bounding training data reconstruction in private (deep) learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guo"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"ref32","first-page":"1895","article-title":"Evaluating differentially private machine learning in practice","volume-title":"Proc. 28th USENIX Secur. Symp. (USENIX Security)","author":"Jayaraman"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2023.3244198"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1214\/009053607000000505"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1214\/18-EJS1403"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW51313.2020.00134"},{"key":"ref38","article-title":"Reducing leakage in distributed deep learning for sensitive health data","author":"Vepakomma","year":"2019","journal-title":"arXiv:1812.00564"},{"volume-title":"Acquire valued shoppers challenge","year":"2014","author":"DMDave","key":"ref39"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.4324\/9780080938318-15"},{"journal-title":"Home credit default risk","year":"2018","author":"Montoya","key":"ref42"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref43"},{"key":"ref44","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref45","article-title":"Measuring and controlling split layer privacy leakage using fisher information","author":"Maeng","year":"2022","journal-title":"arXiv:2209.10119"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583359"}],"container-title":["IEEE Transactions on Consumer Electronics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/30\/10510045\/10452336.pdf?arnumber=10452336","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,10]],"date-time":"2025-02-10T18:31:51Z","timestamp":1739212311000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10452336\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2]]},"references-count":46,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tce.2024.3370764","relation":{},"ISSN":["0098-3063","1558-4127"],"issn-type":[{"type":"print","value":"0098-3063"},{"type":"electronic","value":"1558-4127"}],"subject":[],"published":{"date-parts":[[2024,2]]}}}