{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T16:03:52Z","timestamp":1781280232678,"version":"3.54.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Research Center for Trusted Artificial Intelligence the Ivannikov Institute for System Programming of the Russian Academy of Sciences"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3550068","type":"journal-article","created":{"date-parts":[[2025,3,10]],"date-time":"2025-03-10T17:34:41Z","timestamp":1741628081000},"page":"3893-3906","source":"Crossref","is-referenced-by-count":5,"title":["GLiRA: Closed-Box Membership Inference Attack via Knowledge Distillation"],"prefix":"10.1109","volume":"20","author":[{"given":"Andrey V.","family":"Galichin","sequence":"first","affiliation":[{"name":"Artificial Intelligence Research Institute, Moscow, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0438-6361","authenticated-orcid":false,"given":"Mikhail","family":"Pautov","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Research Institute, Moscow, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alexey","family":"Zhavoronkin","sequence":"additional","affiliation":[{"name":"Sber, Moscow, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9672-2427","authenticated-orcid":false,"given":"Oleg Y.","family":"Rogov","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Research Institute, Moscow, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ivan","family":"Oseledets","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Research Institute, Moscow, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"267","article-title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","volume-title":"Proc. USENIX Secur. Symp.","volume":"267","author":"Carlini"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3446776"},{"key":"ref3","article-title":"Membership inference attack on diffusion models via quantile regression","volume-title":"Proc. NeurIPS Workshop Regulatable ML","author":"Wu"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref5","first-page":"5558","article-title":"White-box vs black-box: Bayes optimal strategies for membership inference","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sablayrolles"},{"key":"ref6","first-page":"1964","article-title":"Label-only membership inference attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Choquette-Choo"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3523273"},{"key":"ref8","first-page":"61","article-title":"Membership inference attack against differentially private deep learning model","volume":"11","author":"Rahman","year":"2018","journal-title":"Trans. Data Priv."},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref10","article-title":"Canary in a coalmine: Better membership inference with ensembled adversarial queries","volume-title":"Proc. 11th Int. Conf. Learn. Represent.","author":"Wen"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560684"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3303718"},{"key":"ref13","article-title":"On the importance of difficulty calibration in membership inference attacks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Watson"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/WACV57701.2024.00479"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560675"},{"key":"ref16","first-page":"20863","article-title":"Scalable membership inference attacks via quantile regression","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Bertran"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1503.02531"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484575"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-acl.719"},{"key":"ref21","first-page":"10968","article-title":"A blessing of dimensionality in membership inference through regularization","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Tan"},{"key":"ref22","article-title":"FitNets: Hints for thin deep nets","volume-title":"Proc. 3rd Int. Conf. Learn. Represent.","author":"Romero"},{"key":"ref23","article-title":"Paying more attention to attention: Improving the performance of convolutional neural networks via attention transfer","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Zagoruyko"},{"key":"ref24","first-page":"4723","article-title":"Knowledge transfer with Jacobian matching","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","volume":"80","author":"Srinivas"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00409"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00201"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2024\/528"},{"key":"ref28","first-page":"1607","article-title":"Born again neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Furlanello"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/362"},{"issue":"694","key":"ref30","first-page":"289","article-title":"IX. On the problem of the most efficient tests of statistical hypotheses","volume":"231","author":"Neyman","year":"1933","journal-title":"Philos. Trans. Roy. Soc. London. Ser. A, Math. Phys. Eng. Sci."},{"key":"ref31","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref32","article-title":"CINIC-10 is not ImageNet or CIFAR-10","author":"Darlow","year":"2018","journal-title":"arXiv:1810.03505"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref34","first-page":"2633","article-title":"Extracting training data from large language models","volume-title":"Proc. 30th USENIX Security Symp.","author":"Carlini"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref37","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. 3rd Int. Conf. Learn. Represent.","author":"Simonyan"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref39","article-title":"On calibration of modern neural networks","author":"Guo","year":"2017","journal-title":"arXiv:1706.04599"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01261-8_1"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10919132.pdf?arnumber=10919132","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,15]],"date-time":"2025-04-15T05:00:27Z","timestamp":1744693227000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10919132\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3550068","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}