{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T15:28:45Z","timestamp":1781018925406,"version":"3.54.1"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372126"],"award-info":[{"award-number":["62372126"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372129"],"award-info":[{"award-number":["62372129"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2436208"],"award-info":[{"award-number":["U2436208"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272119"],"award-info":[{"award-number":["62272119"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072130"],"award-info":[{"award-number":["62072130"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102379"],"award-info":[{"award-number":["62102379"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001321","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"publisher","award":["2023A1515030142"],"award-info":[{"award-number":["2023A1515030142"]}],"id":[{"id":"10.13039\/501100001321","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Key Technologies Research and Development Program of Guangdong Province","award":["2024B0101010002"],"award-info":[{"award-number":["2024B0101010002"]}]},{"name":"Strategic Research and Consulting Project of the Chinese Academy of Engineering","award":["2023-JB-13"],"award-info":[{"award-number":["2023-JB-13"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2024.3518779","type":"journal-article","created":{"date-parts":[[2024,12,18]],"date-time":"2024-12-18T19:27:50Z","timestamp":1734550070000},"page":"1023-1036","source":"Crossref","is-referenced-by-count":5,"title":["Query-Efficient Model Inversion Attacks: An Information Flow View"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9791-0980","authenticated-orcid":false,"given":"Yixiao","family":"Xu","sequence":"first","affiliation":[{"name":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Binxing","family":"Fang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2290-046X","authenticated-orcid":false,"given":"Mohan","family":"Li","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8510-4025","authenticated-orcid":false,"given":"Xiaolei","family":"Liu","sequence":"additional","affiliation":[{"name":"Chinese Academy of Engineering Physics, Institute of Computer Application, Mianyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9409-5359","authenticated-orcid":false,"given":"Zhihong","family":"Tian","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-017-3158-6"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-021-26216-9"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2020.3022168"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-022-00520-5"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2023.3309274"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref8","first-page":"2633","article-title":"Extracting training data from large language models","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Carlini"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00033"},{"key":"ref10","first-page":"20522","article-title":"Plug & play attacks: Towards robust and flexible model inversion attacks","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","volume":"162","author":"Struppek"},{"key":"ref11","first-page":"214","article-title":"Wasserstein generative adversarial networks","volume-title":"Proc. Int. Conf. Mach. Learn.","volume":"70","author":"Arjovsky"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3140687"},{"key":"ref13","article-title":"Class notes for transmission of information","volume-title":"Course 6.574","author":"Fano","year":"1952"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2022.11.001"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1561\/2200000083"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3309992"},{"key":"ref17","first-page":"40306","article-title":"Bag of tricks for training data extraction from language models","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","volume":"202","author":"Yu"},{"key":"ref18","first-page":"1964","article-title":"Label-only membership inference attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Choquette-Choo"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3413592"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.naacl-main.73"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10095514"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3372815"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3207915"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24335"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3295942"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01587"},{"key":"ref28","first-page":"9706","article-title":"Variational model inversion attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wang"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ITW.2015.7133169"},{"key":"ref30","article-title":"Opening the black box of deep neural networks via information","author":"Shwartz-Ziv","year":"2017","journal-title":"arXiv:1703.00810"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i9.21272"},{"key":"ref32","first-page":"27338","article-title":"Improving adversarial robustness via mutual information estimation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhou"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17387"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.26421\/qic12.5-6-4"},{"key":"ref35","first-page":"188","article-title":"A mutual information regularization for adversarial training","volume-title":"Proc. Asian Conf. Mach. Learn.","author":"Atsague"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00453"},{"key":"ref37","first-page":"2","article-title":"Novel dataset for fine-grained image categorization","volume-title":"Proc. 1st Workshop Fine-Grained Vis. Categorization, IEEE Conf. Comput. Vis. Pattern Recognit.","author":"Khosla"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00813"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00821"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2014.7025068"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.2970919"},{"key":"ref43","first-page":"1","article-title":"Training generative adversarial networks with limited data","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Karras"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00309"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.2106.12423"},{"key":"ref49","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume-title":"Proc. NIPS","volume":"33","author":"Ho"},{"key":"ref50","first-page":"6626","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Heusel"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.5555\/3454287.3455008"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref53","first-page":"3353","article-title":"Adversarial training for free","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Shafahi"},{"key":"ref54","article-title":"Defending model inversion and membership inference attacks via prediction purification","author":"Yang","year":"2020","journal-title":"arXiv:2005.03915"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3295944"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10807137.pdf?arnumber=10807137","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,14]],"date-time":"2025-01-14T19:44:25Z","timestamp":1736883865000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10807137\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3518779","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}