{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T23:01:03Z","timestamp":1780095663732,"version":"3.54.0"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072361"],"award-info":[{"award-number":["62072361"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015401","name":"Key Research and Development Projects of Shaanxi Province","doi-asserted-by":"publisher","award":["2022GY-019"],"award-info":[{"award-number":["2022GY-019"]}],"id":[{"id":"10.13039\/501100015401","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shaanxi Fundamental Science Research Project for Mathematics and Physics","award":["22JSY019"],"award-info":[{"award-number":["22JSY019"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62125205"],"award-info":[{"award-number":["62125205"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["QTZX23091"],"award-info":[{"award-number":["QTZX23091"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Fellowship of China Postdoctoral Science Foundation","award":["2022T150507"],"award-info":[{"award-number":["2022T150507"]}]},{"name":"Opening Project of Intelligent Policing Key Laboratory of Sichuan Province","award":["ZNJW2023KFMS002"],"award-info":[{"award-number":["ZNJW2023KFMS002"]}]},{"name":"Cloud Technology Endowed Professorship"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Serv. Comput."],"published-print":{"date-parts":[[2023,11]]},"DOI":"10.1109\/tsc.2023.3309336","type":"journal-article","created":{"date-parts":[[2023,8,28]],"date-time":"2023-08-28T17:58:57Z","timestamp":1693245537000},"page":"4087-4101","source":"Crossref","is-referenced-by-count":4,"title":["Defending Against Membership Inference Attack by Shielding Membership Signals"],"prefix":"10.1109","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3260-4530","authenticated-orcid":false,"given":"Yinbin","family":"Miao","sequence":"first","affiliation":[{"name":"School of Cyber Engineering, Xidian University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-9432-2855","authenticated-orcid":false,"given":"Yueming","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Cyber Engineering, Xidian University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5583-4155","authenticated-orcid":false,"given":"Xinghua","family":"Li","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Service Networks, School of Cyber Engineering, Engineering Research Center of Big data Security, Ministry of Education, Xidian University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9078-7462","authenticated-orcid":false,"given":"Yu","family":"Guo","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Beijing Normal University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4238-3295","authenticated-orcid":false,"given":"Ximeng","family":"Liu","sequence":"additional","affiliation":[{"name":"Key Laboratory of Information Security of Network Systems, School of Mathematics and Computer Science, Fuzhou University, Fuzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9208-5336","authenticated-orcid":false,"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[{"name":"Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3491-8146","authenticated-orcid":false,"given":"Robert H.","family":"Deng","sequence":"additional","affiliation":[{"name":"School of Information Systems, Singapore Management University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pgen.1000167"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978355"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23064"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23183"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"issue":"1","key":"ref10","first-page":"1929","article-title":"Dropout: A simple way to prevent neural networks from overfitting","volume":"15","author":"Srivastava","year":"2014","journal-title":"J. Mach. Learn. Res."},{"key":"ref11","article-title":"Towards demystifying membership inference attacks","author":"Truex","year":"2018"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363201"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243855"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref15","article-title":"Semi-supervised knowledge transfer for deep learning from private training data","author":"Papernot","year":"2016"},{"key":"ref16","article-title":"Scalable private learning with pate","author":"Papernot","year":"2018"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICC42927.2021.9500657"},{"key":"ref19","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref20","first-page":"1964","article-title":"Label-only membership inference attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Choquette-Choo"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2019.2916086"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2022.110014"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330885"},{"key":"ref25","article-title":"Membership inference attacks against synthetic data through overfitting detection","author":"van Breugel","year":"2023"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/csf57540.2023.00013"},{"key":"ref27","article-title":"How to combine membership-inference attacks on multiple updated models","author":"Jagielski","year":"2022"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3422337.3447836"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3508398.3511513"},{"issue":"1","key":"ref30","first-page":"61","article-title":"Membership inference attack against differentially private deep learning model","volume":"11","author":"Rahman","year":"2018","journal-title":"Trans. Data Privacy"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/BF00058655"},{"key":"ref32","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Tram\u00e8r"},{"key":"ref33","first-page":"1","article-title":"A novel self-distillation architecture to defeat membership inference attacks","volume-title":"Proc. NeurIPS 2021 Workshop Privacy Mach. Learn.","author":"Tang"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1098\/rsta.2018.0083"},{"key":"ref35","article-title":"CIFAR-10 (Canadian Institute for Advanced Research)","author":"Krizhevsky","year":"2009"},{"key":"ref36","article-title":"CIFAR-100 (Canadian Institute for Advanced Research)","author":"Krizhevsky","year":"2009"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560684"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3180828"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/FG47880.2020.00085"}],"container-title":["IEEE Transactions on Services Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4629386\/10360362\/10233063.pdf?arnumber=10233063","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,12]],"date-time":"2024-01-12T02:27:13Z","timestamp":1705026433000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10233063\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11]]},"references-count":39,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tsc.2023.3309336","relation":{},"ISSN":["1939-1374","2372-0204"],"issn-type":[{"value":"1939-1374","type":"electronic"},{"value":"2372-0204","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,11]]}}}