{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T17:54:23Z","timestamp":1757613263984,"version":"3.44.0"},"reference-count":82,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["LP220200808","DP230100246","DP250100463"],"award-info":[{"award-number":["LP220200808","DP230100246","DP250100463"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"name":"NSFC-FDCT Joint Scientific Research Project Fund","award":["0051\/2022\/AFJ"],"award-info":[{"award-number":["0051\/2022\/AFJ"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1109\/tdsc.2025.3551157","type":"journal-article","created":{"date-parts":[[2025,3,13]],"date-time":"2025-03-13T13:48:49Z","timestamp":1741873729000},"page":"4654-4670","source":"Crossref","is-referenced-by-count":0,"title":["Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifiers"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2763-8314","authenticated-orcid":false,"given":"Huan","family":"Tian","sequence":"first","affiliation":[{"name":"Australian Artificial Intelligence Institute, the School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9776-0529","authenticated-orcid":false,"given":"Guangsheng","family":"Zhang","sequence":"additional","affiliation":[{"name":"Australian Artificial Intelligence Institute, the School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3603-6617","authenticated-orcid":false,"given":"Bo","family":"Liu","sequence":"additional","affiliation":[{"name":"Australian Artificial Intelligence Institute, the School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3411-7947","authenticated-orcid":false,"given":"Tianqing","family":"Zhu","sequence":"additional","affiliation":[{"name":"City University of Macau, Macao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3690-0321","authenticated-orcid":false,"given":"Ming","family":"Ding","sequence":"additional","affiliation":[{"name":"Data61, CSIRO, Canberra, ACT, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1680-2521","authenticated-orcid":false,"given":"Wanlei","family":"Zhou","sequence":"additional","affiliation":[{"name":"City University of Macau, Macao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Brown"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00371"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3457607"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00028"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref6","first-page":"4525","article-title":"ML-Doctor: Holistic risk assessment of inference attacks against machine learning models","volume-title":"Proc. USENIX Secur. Symp.","author":"Liu"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2024\/57"},{"key":"ref9","first-page":"325","article-title":"Learning fair representations","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zemel"},{"key":"ref10","first-page":"2277","article-title":"FNNC: Achieving fairness through neural networks","volume-title":"Proc. Int. Joint Conf. Artif. Intell.","author":"Manisha"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00064"},{"key":"ref12","first-page":"30023","article-title":"Scalable and stable surrogates for flexible classifiers with fairness constraints","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Bendekgey"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02338"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01914"},{"article-title":"FairGBM: Gradient boosting with fairness constraints","volume-title":"Proc. 11th Int. Conf. Learn. Representations","author":"Cruz","key":"ref15"},{"article-title":"Re-weighting based group fairness regularization via classwise robust optimization","volume-title":"Proc. 11th Int. Conf. Learn. Representations","author":"Jung","key":"ref16"},{"key":"ref17","first-page":"11 492","article-title":"To be robust or to be fair: Towards fairness in adversarial training","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xu"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3187165"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00922"},{"key":"ref20","first-page":"3384","article-title":"Learning adversarially fair and transferable representations","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Madras"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01473"},{"key":"ref22","first-page":"1436","article-title":"Flexibly fair representation learning by disentanglement","volume-title":"Proc. 36th Int. Conf. Mach. Learn.","author":"Creager"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i3.16341"},{"article-title":"Fair mixup: Fairness via interpolation","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Ching-Yao Chuang","key":"ref24"},{"key":"ref25","first-page":"12091","article-title":"Fairness via representation neutralization","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Du"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01014"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01013"},{"article-title":"Fairness-aware contrastive learning with partially annotated sensitive attributes","volume-title":"Proc. 11th Int. Conf. Learn. Representations","author":"Zhang","key":"ref28"},{"key":"ref29","first-page":"7852","article-title":"FairVFL: A fair vertical federated learning framework with contrastive adversarial learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Qi"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9054129"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3422841.3423533"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00918"},{"article-title":"Fairbatch: Batch selection for model fairness","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Roh","key":"ref33"},{"article-title":"Fair sequential selection using supervised learning models","year":"2021","author":"Khalili","key":"ref34"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01322"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00342"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2020.3002567"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3233093"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3384181"},{"key":"ref40","first-page":"27 100","article-title":"Self-supervised fair representation learning without demographics","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Chai"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref43","first-page":"5558","article-title":"White-box versus black-box: Bayes optimal strategies for membership inference","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sablayrolles"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3180828"},{"key":"ref45","first-page":"1964","article-title":"Label-only membership inference attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Choquette-Choo"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484575"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560675"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484749"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i12.26731"},{"key":"ref50","first-page":"4561","article-title":"Membership inference attacks and defenses in neural network pruning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Yuan"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3154029"},{"article-title":"RelaxLoss: Defending membership inference attacks without losing utility","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Chen","key":"ref52"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26289"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3088480"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3232111"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3174569"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19821-2_21"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559359"},{"key":"ref59","first-page":"1867","article-title":"M4I: Multi-modal models membership inference","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Hu"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"ref62","first-page":"11 492","article-title":"To be robust or to be fair: Towards fairness in adversarial training","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xu"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2023.110777"},{"article-title":"On adversarial bias and the robustness of fair machine learning","year":"2020","author":"Chang","key":"ref64"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/59"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i10.17080"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-96-0567-5_24"},{"article-title":"Fair normalizing flows","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Balunovic","key":"ref68"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D17-1323"},{"key":"ref70","first-page":"3315","article-title":"Equality of opportunity in supervised learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Hardt"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00559"},{"key":"ref72","article-title":"UTKFace large scale face dataset","author":"Geralds","year":"2017","journal-title":"github.com"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00159"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i7.20770"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01016"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00934"},{"article-title":"FFB: A fair fairness benchmark for in-processing group fairness methods","year":"2023","author":"Han","key":"ref77"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"article-title":"Very deep convolutional networks for large-scale image recognition","year":"2015","author":"Simonyan","key":"ref79"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE60146.2024.00139"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11150357\/10925515.pdf?arnumber=10925515","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,4]],"date-time":"2025-09-04T18:52:58Z","timestamp":1757011978000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10925515\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9]]},"references-count":82,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3551157","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2025,9]]}}}