{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:41:40Z","timestamp":1783788100397,"version":"3.55.0"},"reference-count":100,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2023YFB2904000"],"award-info":[{"award-number":["2023YFB2904000"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172359"],"award-info":[{"award-number":["62172359"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20178"],"award-info":[{"award-number":["U20A20178"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072395"],"award-info":[{"award-number":["62072395"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Zhejiang Provincial Natural Science Foundation of China","award":["LD24F020010"],"award-info":[{"award-number":["LD24F020010"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2021FZZX001-27"],"award-info":[{"award-number":["2021FZZX001-27"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Hangzhou Leading Innovation and Entrepreneurship Team","award":["TD2020003"],"award-info":[{"award-number":["TD2020003"]}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2308730"],"award-info":[{"award-number":["CNS-2308730"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2024,11]]},"DOI":"10.1109\/tdsc.2024.3372777","type":"journal-article","created":{"date-parts":[[2024,3,5]],"date-time":"2024-03-05T19:24:52Z","timestamp":1709666692000},"page":"5242-5258","source":"Crossref","is-referenced-by-count":47,"title":["PrivacyAsst: Safeguarding User Privacy in Tool-Using Large Language Model Agents"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7427-5774","authenticated-orcid":false,"given":"Xinyu","family":"Zhang","sequence":"first","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3797-846X","authenticated-orcid":false,"given":"Huiyu","family":"Xu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0921-8869","authenticated-orcid":false,"given":"Zhongjie","family":"Ba","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5804-3279","authenticated-orcid":false,"given":"Zhibo","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4095-4506","authenticated-orcid":false,"given":"Yuan","family":"Hong","sequence":"additional","affiliation":[{"name":"University of Connecticut, Stamford, CT, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2636-5561","authenticated-orcid":false,"given":"Jian","family":"Liu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7872-6969","authenticated-orcid":false,"given":"Zhan","family":"Qin","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1969-2591","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, School of Cyber Science and Technology, College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Gpt-4","year":"2023"},{"key":"ref2","article-title":"LLaMA: Open and efficient foundation language models","author":"Touvron","year":"2023"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-023-06291-2"},{"key":"ref4","article-title":"Metatool benchmark: Deciding whether to use tools and which to use","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Huang"},{"key":"ref5","article-title":"ToolLLM: Facilitating large language models to master 16000 real-world APIs","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Qin"},{"key":"ref6","article-title":"Llm-powered autonomous agents","author":"Weng","year":"2023"},{"key":"ref7","article-title":"HuggingGPT: Solving ai tasks with chatGPT and its friends in hugging face","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Shen"},{"key":"ref8","article-title":"PrivateGPT","author":"Mart\u00ednez Toro","year":"2023"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.21236\/ADA465464"},{"key":"ref10","article-title":"PrivateGPT: The privacy layer for chatGPT by private AI"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36415-3_4"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-35691-4_40"},{"key":"ref13","first-page":"53","article-title":"Text-CRS: A generalized certified robustness framework against textual adversarial attacks","volume-title":"Proc. IEEE Symp. Secur. Privacy","author":"Zhang"},{"key":"ref14","article-title":"Dual learning for machine translation","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"He"},{"key":"ref15","article-title":"6 NLP tasks for natural language generation| innerdoc.com | medium","author":"van Zoest","year":"2021"},{"key":"ref16","article-title":"Llama 2: Open foundation and fine-tuned chat models","author":"Touvron","year":"2023"},{"key":"ref17","article-title":"Gemini","year":"2024"},{"key":"ref18","article-title":"A survey of large language models","author":"Zhao","year":"2023"},{"key":"ref19","article-title":"Sparks of artificial general intelligence: Early experiments with GPT-4","author":"Bubeck","year":"2023"},{"key":"ref20","article-title":"A prompt pattern catalog to enhance prompt engineering with chatGPT","author":"White","year":"2023"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.579"},{"key":"ref22","article-title":"ToolFormer: Language models can teach themselves to use tools","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Schick"},{"key":"ref23","article-title":"Reinventing search with a new ai-powered microsoft bing and edge, your copilot for the web - the official microsoft blog","author":"Mehdi","year":"2023"},{"key":"ref24","first-page":"540","article-title":"VoxPoser: Composable 3D value maps for robotic manipulation with language models","volume-title":"Proc. Conf. Robot Learn.","author":"Huang"},{"key":"ref25","article-title":"Voyager: An open-ended embodied agent with large language models","author":"Wang","year":"2023"},{"key":"ref26","article-title":"Mantella (chatgpt in skyrim VR) - improved voices & long-term memory update: R\/skyrimvr"},{"key":"ref27","article-title":"Large language models as tool makers","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Cai"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179300"},{"key":"ref29","article-title":"PromptCARE: Prompt copyright protection by watermark injection and verification","author":"Yao","year":"2023"},{"key":"ref30","article-title":"Generative AI data privacy with skyflow llm privacy vault - skyflow","author":"Moktali","year":"2023"},{"key":"ref31","article-title":"TrustLLM: Trustworthiness in large language models","author":"Sun","year":"2024"},{"key":"ref32","first-page":"2633","article-title":"Extracting training data from large language models","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Carlini"},{"key":"ref33","article-title":"Training data leakage analysis in language models","author":"Inan","year":"2021"},{"key":"ref34","article-title":"On the privacy risk of in-context learning","volume-title":"Proc. 61st Annu. Meeting Assoc. Comput. Linguistics","author":"Duan"},{"key":"ref35","article-title":"Propile: Probing privacy leakage in large language models","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Kim"},{"key":"ref36","article-title":"Linus on X: \u201cif you think this is creepy\u2026 you should know what all major stores in the world knows about you as a shopper they use in-store, online, cell-tower, and more to keep track of everything\u2026 everything. cambridge analytics is a joke in comparison","author":"Ekenstam","year":"2023"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_13"},{"key":"ref38","first-page":"657","article-title":"You shouldn\u2019t collect my secrets: Thwarting sensitive keystroke leakage in mobile ime apps","volume-title":"Proc. 24th USENIX Secur. Symp.","author":"Chen"},{"key":"ref39","first-page":"945","article-title":"Towards discovering and understanding task hijacking in android","volume-title":"Proc. 24th USENIX Secur. Symp.","author":"Ren"},{"key":"ref40","article-title":"Hugging face\u2013the ai community building the future","author":"Face"},{"key":"ref41","article-title":"Tenseal: A library for encrypted tensor operations using homomorphic encryption","author":"Benaissa","year":"2021"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32009-5_50"},{"key":"ref43","article-title":"Somewhat practical fully homomorphic encryption","author":"Fan","year":"2012","journal-title":"Cryptol. ePrint Arch."},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70694-8_15"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-45239-0_4"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19074-2_21"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32009-5_49"},{"key":"ref48","article-title":"Dall\u00b7e 3"},{"key":"ref49","article-title":"Midjourney"},{"key":"ref50","article-title":"Stable diffusion \u2014 stability AI"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3549993.3550007"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1142\/S0218488502001648"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/1217299.1217302"},{"key":"ref54","first-page":"106","article-title":"T-closeness: Privacy beyond k-anonymity and l-diversity","volume-title":"Proc. IEEE 23 rd Int. Conf. Data Eng.","author":"Li"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1023\/A:1026543900054"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.398"},{"key":"ref57","article-title":"Trust and privacy concern within social networking sites: A comparison of facebook and myspace","volume-title":"Proc. Reaching New Heights. 13th Amer. Conf. Inf. Syst.","author":"Dwyer"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-122"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref60","article-title":"Framingham heart study dataset","author":"Bhardwaj"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.596"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref63","article-title":"Anthropic claude 2","year":"2023"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01261-8_20"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1038\/s41597-022-01894-2"},{"key":"ref66","article-title":"Prompt library - by sincode AI","year":"2023"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3182658"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/358549.358563"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44702-4_2"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45496-9_18"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.12"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/BF00206326"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866346"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36467-6_17"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/293347.293350"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2016-0008"},{"key":"ref77","first-page":"17","article-title":"Practical traffic analysis: Extending and resisting statistical disclosure","volume-title":"Proc. Int. Workshop Privacy Enhancing Technol.","author":"Mathewson"},{"key":"ref78","article-title":"A survey of anonymous communication channels","author":"Danezis","year":"2008"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44702-4_3"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30114-1_21"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2002.1181415"},{"key":"ref82","first-page":"179","article-title":"Anonymization of IP traffic monitoring data: Attacks on two prefix-preserving anonymization schemes and some proposed remedies","volume-title":"Proc. Int. Workshop Privacy Enhancing Technol.","author":"Brekne"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02918-9_10"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243809"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3078099"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3425401"},{"key":"ref87","article-title":"What is data masking? techniques, types and best practices","author":"Cobb"},{"key":"ref88","first-page":"7","article-title":"Protecting patient privacy with data masking","volume-title":"Proc. Workshop Inf. Secur. Privacy","author":"Li"},{"key":"ref89","article-title":"Data masking: Techniques & best practices"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPCT.2015.7159301"},{"key":"ref91","article-title":"Data masking definition"},{"key":"ref92","article-title":"Data masking and encryption are different","author":"Simpson"},{"key":"ref93","article-title":"Significant-gravitas\/autogpt: An experimental open-source attempt to make GPT-4 fully autonomous"},{"key":"ref94","article-title":"Antonosika\/gpt-engineer: Specify what you want it to build, the ai asks for clarification, and then builds it"},{"key":"ref95","first-page":"24824","article-title":"Chain-of-thought prompting elicits reasoning in large language models","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Wei"},{"key":"ref96","article-title":"Tree of thoughts: Deliberate problem solving with large language models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Yao"},{"key":"ref97","article-title":"LLM P: Empowering large language models with optimal planning proficiency","author":"Liu","year":"2023"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i2.27829"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612386"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612377"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10750463\/10458329-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10750463\/10458329.pdf?arnumber=10458329","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,26]],"date-time":"2024-11-26T23:28:40Z","timestamp":1732663720000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10458329\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11]]},"references-count":100,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2024.3372777","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11]]}}}