{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T00:30:04Z","timestamp":1766449804840,"version":"3.37.3"},"reference-count":67,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001381","name":"National Research Foundation, Singapore, under its AI Singapore Program","doi-asserted-by":"publisher","award":["AISG3-RP-2022-029"],"award-info":[{"award-number":["AISG3-RP-2022-029"]}],"id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2024.3453555","type":"journal-article","created":{"date-parts":[[2024,9,2]],"date-time":"2024-09-02T17:34:29Z","timestamp":1725298469000},"page":"8109-8124","source":"Crossref","is-referenced-by-count":6,"title":["Exploring Privacy and Fairness Risks in Sharing Diffusion Models: An Adversarial Perspective"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9671-5104","authenticated-orcid":false,"given":"Xinjian","family":"Luo","sequence":"first","affiliation":[{"name":"School of Computing, National University of Singapore, Cluny Road, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4010-9831","authenticated-orcid":false,"given":"Yangfan","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Computing, National University of Singapore, Cluny Road, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8943-0335","authenticated-orcid":false,"given":"Fei","family":"Wei","sequence":"additional","affiliation":[{"name":"Alibaba Group, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1436-3916","authenticated-orcid":false,"given":"Yuncheng","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Computing, National University of Singapore, Cluny Road, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0914-4580","authenticated-orcid":false,"given":"Xiaokui","family":"Xiao","sequence":"additional","affiliation":[{"name":"School of Computing, National University of Singapore, Cluny Road, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4446-1100","authenticated-orcid":false,"given":"Beng Chin","family":"Ooi","sequence":"additional","affiliation":[{"name":"School of Computing, National University of Singapore, Cluny Road, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-019-0206-3"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.20517\/ch.2022.15"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01387"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1126\/sciadv.abb7973"},{"key":"ref5","article-title":"Meddiff: Generating electronic health records using accelerated denoising diffusion model","volume":"abs\/2302.04355","author":"He","year":"2023","journal-title":"CoRR"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00084"},{"key":"ref7","article-title":"Is synthetic data from generative models ready for image recognition?","author":"He","year":"2022","journal-title":"arXiv:2210.07574"},{"key":"ref8","first-page":"1","article-title":"Diffalign: Few-shot learning using diffusion based synthesis and alignment","volume":"abs\/2212.05404","author":"Roy","year":"2022","journal-title":"CoRR"},{"key":"ref9","first-page":"1","article-title":"Tabddpm: Modelling tabular data with diffusion models","volume":"abs\/2209.15421","author":"Kotelnikov","year":"2022","journal-title":"CoRR"},{"key":"ref10","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume-title":"Proc. NeurIPS","volume":"33","author":"Ho"},{"key":"ref11","first-page":"11895","article-title":"Generative modeling by estimating gradients of the data distribution","volume-title":"Proc. NeurIPS","volume":"32","author":"Song"},{"key":"ref12","first-page":"1","article-title":"Score-based generative modeling through stochastic differential equations","volume-title":"Proc. ICLR","author":"Song"},{"key":"ref13","first-page":"1","article-title":"Leaving reality to imagination: Robust classification via generated datasets","volume":"abs\/2302.02503","author":"Bansal","year":"2023","journal-title":"CoRR"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3116668"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2020.3001061"},{"key":"ref16","first-page":"5253","article-title":"Extracting training data from diffusion models","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Carlini"},{"key":"ref17","first-page":"1","article-title":"Are diffusion models vulnerable to membership inference attacks?","volume":"abs\/2302.01316","author":"Duan","year":"2023","journal-title":"CoRR"},{"key":"ref18","article-title":"Membership inference of diffusion models","author":"Hu","year":"2023","journal-title":"arXiv:2301.09956"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23019"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833623"},{"key":"ref22","first-page":"59","article-title":"On the impossibility of fairness-aware learning from corrupted data","volume-title":"Proc. Algorithmic Fairness Lens Causality Robustness Workshop","author":"Konstantinov"},{"key":"ref23","article-title":"On adversarial bias and the robustness of fair machine learning","author":"Chang","year":"2020","journal-title":"arXiv:2006.08669"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"ref25","first-page":"60","article-title":"A reductions approach to fair classification","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Agarwal"},{"key":"ref26","first-page":"3315","article-title":"Equality of opportunity in supervised learning","volume-title":"Proc. NeurIPS","author":"Hardt"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-00123-9_30"},{"key":"ref28","first-page":"162","article-title":"Poisoning attacks on algorithmic fairness","volume-title":"Proc. Joint Eur. Conf. Mach. Learn. Knowl. Discovery Databases","author":"Solans"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ISIT50566.2022.9834475"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3349323"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3196646"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref33","article-title":"Inferring class label distribution of training data from classifiers: An accuracy-augmented meta-classifier attack","author":"Ramakrishna","year":"2022","journal-title":"arXiv:2211.04157"},{"key":"ref34","first-page":"1","article-title":"Bias propagation in federated learning","volume-title":"Proc. ICLR","author":"Chang"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE51399.2021.00023"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3453555"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.69.066138"},{"key":"ref38","first-page":"531","article-title":"Mutual information neural estimation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Belghazi"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3201576"},{"key":"ref40","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","volume-title":"Proc. ICML","author":"Radford"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.532"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1963.10500830"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00005"},{"key":"ref44","first-page":"702","article-title":"Identifying and correcting label bias in machine learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Jiang"},{"key":"ref45","first-page":"8780","article-title":"Diffusion models beat gans on image synthesis","volume-title":"Proc. NeurIPS","volume":"34","author":"Dhariwal"},{"key":"ref46","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. NeurIPS","volume":"33","author":"Brown"},{"key":"ref47","first-page":"596","article-title":"FixMatch: Simplifying semi-supervised learning with consistency and confidence","volume-title":"Proc. NeurIPS","volume":"33","author":"Sohn"},{"volume-title":"MNIST Handwritten Digit Database","year":"2010","author":"LeCun","key":"ref48"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"volume-title":"UCI Machine Learning Repository","year":"2017","author":"Dua","key":"ref50"},{"key":"ref51","article-title":"Spectral normalization for generative adversarial networks","author":"Miyato","year":"2018","journal-title":"arXiv:1802.05957"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01243"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3185773"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560573"},{"key":"ref55","first-page":"1","article-title":"PATE-GAN: Generating synthetic data with differential privacy guarantees","volume-title":"Proc. 7th Int. Conf. Learn. Represent.","author":"Jordon"},{"key":"ref56","article-title":"Differentially private diffusion models generate useful synthetic images","volume":"abs\/2302.13861","author":"Ghalebikesabi","year":"2023","journal-title":"CoRR"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2010.247"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00113"},{"key":"ref59","first-page":"1","article-title":"Differentially private federated learning: A client level perspective","volume":"abs\/1712.07557","author":"Geyer","year":"2017","journal-title":"CoRR"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2011.5995347"},{"key":"ref61","first-page":"1","article-title":"Poisoning attacks with generative adversarial nets","volume":"abs\/1906.07773","author":"Mu\u00f1oz-Gonz\u00e1lez","year":"2019","journal-title":"CoRR"},{"key":"ref62","first-page":"201","article-title":"Online data poisoning attacks","volume-title":"Proc. Learn. Dyn. Control","author":"Zhang"},{"key":"ref63","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-11012-3_25"},{"key":"ref65","first-page":"1747","article-title":"Pixel recurrent neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","volume":"48","author":"Van Den Oord"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref67","article-title":"Passive inference attacks on split learning via adversarial regularization","author":"Zhu","year":"2023","journal-title":"arXiv:2310.10483"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10319981\/10663440.pdf?arnumber=10663440","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,13]],"date-time":"2024-09-13T04:58:36Z","timestamp":1726203516000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10663440\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":67,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3453555","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2024]]}}}