{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T07:37:27Z","timestamp":1783409847175,"version":"3.54.6"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272183"],"award-info":[{"award-number":["62272183"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["52031009"],"award-info":[{"award-number":["52031009"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62171189"],"award-info":[{"award-number":["62171189"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20181"],"award-info":[{"award-number":["U20A20181"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Key Research and Development Program of Hubei Province","award":["2023BAB074"],"award-info":[{"award-number":["2023BAB074"]}]},{"name":"Key Research and Development Program of Hubei Province","award":["2021BAA026"],"award-info":[{"award-number":["2021BAA026"]}]},{"name":"Special Fund for Wuhan Yellow Crane Talents (Excellent Young Scholar);"},{"name":"Georgia Tech through USA NSF CISE","award":["2302720"],"award-info":[{"award-number":["2302720"]}]},{"name":"Georgia Tech through USA NSF CISE","award":["2312758"],"award-info":[{"award-number":["2312758"]}]},{"name":"Georgia Tech through USA NSF CISE","award":["2038029"],"award-info":[{"award-number":["2038029"]}]},{"name":"IBM Faculty Award; and"},{"name":"CISCO Edge AI Program"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2023.3324772","type":"journal-article","created":{"date-parts":[[2023,10,16]],"date-time":"2023-10-16T14:00:31Z","timestamp":1697464831000},"page":"427-440","source":"Crossref","is-referenced-by-count":25,"title":["Gradient-Leaks: Enabling Black-Box Membership Inference Attacks Against Machine Learning Models"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2566-9360","authenticated-orcid":false,"given":"Gaoyang","family":"Liu","sequence":"first","affiliation":[{"name":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianlong","family":"Xu","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4255-4680","authenticated-orcid":false,"given":"Rui","family":"Zhang","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Transportation Internet of Things, School of Computer Science and Technology, Wuhan University of Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zixiong","family":"Wang","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Transportation Internet of Things, School of Computer Science and Technology, Wuhan University of Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1963-4954","authenticated-orcid":false,"given":"Chen","family":"Wang","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Transportation Internet of Things, School of Computer Science and Technology, Wuhan University of Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4138-3082","authenticated-orcid":false,"given":"Ling","family":"Liu","sequence":"additional","affiliation":[{"name":"College of Computing, Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00297"},{"key":"ref2","article-title":"A survey of large language models","author":"Zhao","year":"2023","journal-title":"arXiv:2303.18223"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3477495.3532009"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3226905"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833607"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3233190"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2911169"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3523273"},{"key":"ref10","first-page":"5558","article-title":"White-box vs black-box: Bayes optimal strategies for membership inference","volume-title":"Proc. ICML","author":"Sablayrolles"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.6107"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"key":"ref15","article-title":"Membership inference attacks and defenses in classification models","author":"Li","year":"2020","journal-title":"arXiv:2002.12062"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2019.2916086"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N16-3020"},{"key":"ref18","first-page":"8570","article-title":"Wide neural networks of any depth evolve as linear models under gradient descent","volume-title":"Proc. NeurIPS","author":"Lee"},{"key":"ref19","first-page":"1","article-title":"Exploiting transparency measures for membership inference: A cautionary tale","volume-title":"Proc. AAAI Workshop Privacy-Preserving Artif. Intell.","volume":"13","author":"Shokri"},{"key":"ref20","first-page":"2615","article-title":"Systematic evaluation of privacy risks of machine learning models","volume-title":"Proc. USENIX Secur.","author":"Song"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560684"},{"key":"ref22","first-page":"1964","article-title":"Label-only membership inference attacks","volume-title":"Proc. ICML","author":"Choquette-Choo"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0008"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2019.00056"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TPS-ISA48467.2019.00019"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3222880"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484575"},{"key":"ref30","volume-title":"Interpretable Machine Learning: A Guide for Making Black Box Models Explainable","author":"Molnar","year":"2019"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1002\/aic.690370209"},{"key":"ref32","first-page":"3371","article-title":"Stacked denoising autoencoders: Learning useful representations in a deep network with a local denoising criterion","volume":"11","author":"Vincent","year":"2010","journal-title":"J. Mach. Learn. Res."},{"key":"ref33","first-page":"2855","article-title":"Regularizing trajectory optimization with denoising autoencoders","volume-title":"Proc. NeurIPS","author":"Boney"},{"key":"ref34","first-page":"14837","article-title":"Generating diverse high-fidelity images with VQ-VAE-2","volume-title":"Proc. NeurIPS","author":"Razavi"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2017.7953183"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2018-1830"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/3477.764879"},{"key":"ref38","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","volume-title":"Proc. ACM SIGKDD","author":"Ester"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s11222-007-9033-z"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"},{"key":"ref41","first-page":"8024","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume-title":"Proc. NeurIPS","author":"Paszke"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/10206\/10319981\/10285881-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10285881.pdf?arnumber=10285881","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T19:45:26Z","timestamp":1779133526000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10285881\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3324772","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}