{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T20:52:58Z","timestamp":1775508778443,"version":"3.50.1"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1109\/tpami.2026.3654092","type":"journal-article","created":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T20:40:13Z","timestamp":1768423213000},"page":"5879-5891","source":"Crossref","is-referenced-by-count":0,"title":["SLeak: Multi-Target Privacy Stealing Attack Against Split Learning"],"prefix":"10.1109","volume":"48","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2672-9145","authenticated-orcid":false,"given":"Xiaoyang","family":"Xu","sequence":"first","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1096-2505","authenticated-orcid":false,"given":"Wenzhe","family":"Yi","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8813-7842","authenticated-orcid":false,"given":"Juan","family":"Wang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8710-247X","authenticated-orcid":false,"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University at Buffalo, The State University of New York (SUNY), Getzville, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7808-852X","authenticated-orcid":false,"given":"Mengda","family":"Yang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1015-5594","authenticated-orcid":false,"given":"Ziang","family":"Li","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yong","family":"Zhuang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-7969-6692","authenticated-orcid":false,"given":"Yaxin","family":"Liu","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3989-7655","authenticated-orcid":false,"given":"Mang","family":"Ye","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384740"},{"key":"ref3","article-title":"CINIC-10 is not ImageNet or CIFAR-10","author":"Darlow","year":"2018"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3559613.3563198"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3559613.3563201"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24874"},{"key":"ref8","first-page":"1180","article-title":"Unsupervised domain adaptation by backpropagation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ganin"},{"key":"ref9","article-title":"PCAT: Functionality and data stealing from split learning by Pseudo-client attack","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Gao"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS51746.2020.00017"},{"key":"ref11","first-page":"16937","article-title":"Inverting gradients-how easy is it to break privacy in federated learning?","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Geiping"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-13560-1_76"},{"key":"ref13","first-page":"2672","article-title":"Generative adversarial nets","volume-title":"Proc. 28th Int. Conf. Neural Inf. Process. Syst.","author":"Goodfellow"},{"key":"ref14","first-page":"1205","article-title":"Optimal kernel choice for large-scale two-sample tests","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Gretton"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.05.003"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359824"},{"key":"ref18","first-page":"3","article-title":"Autoencoders, minimum description length and Helmholtz free energy","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Hinton"},{"key":"ref19","article-title":"MobileNets: Efficient convolutional neural networks for mobile vision applications","author":"Howard","year":"2017"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00813"},{"key":"ref21","article-title":"Auto-encoding variational bayes","author":"Kingma","year":"2013"},{"key":"ref22","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref23","first-page":"2729","article-title":"Learning bound for parameter transfer learning","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Kumagai"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3370978"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2020.2975749"},{"key":"ref27","first-page":"54 554","volume-title":"Adv. Neural Inf. Process. Syst.","volume":"36","author":"Li","year":"2023"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref29","first-page":"97","article-title":"Learning transferable features with deep adaptation networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Long"},{"key":"ref30","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485259"},{"key":"ref32","article-title":"Split learning for collaborative deep learning in healthcare","author":"Poirot","year":"2019"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref34","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref35","article-title":"OverLearning reveals sensitive attributes","author":"Song","year":"2019"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1214\/009053607000000505"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i8.20825"},{"key":"ref38","article-title":"Practical defences against model inversion attacks for split neural networks","author":"Titcombe","year":"2021"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.316"},{"key":"ref40","article-title":"Deep domain confusion: Maximizing for domain invariance","author":"Tzeng","year":"2014"},{"key":"ref41","article-title":"Reducing leakage in distributed deep learning for sensitive health data","author":"Vepakomma","year":"2019"},{"key":"ref42","article-title":"Split learning for health: Distributed deep learning without sharing raw patient data","author":"Vepakomma","year":"2018"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW51313.2020.00134"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2018.05.083"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01153"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354261"},{"key":"ref48","article-title":"The MNIST database of handwritten digits","author":"LeCun","year":"1998"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3430533"},{"key":"ref50","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-030-63076-8_2","article-title":"Deep leakage from gradients","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Zhu"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3292075"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2020.3004555"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/34\/11474534\/11353031.pdf?arnumber=11353031","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T19:56:21Z","timestamp":1775505381000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11353031\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":52,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2026.3654092","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5]]}}}