{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,31]],"date-time":"2026-10-31T20:38:22Z","timestamp":1793479102699,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,10,12]],"date-time":"2016-10-12T00:00:00Z","timestamp":1476230400000},"content-version":"vor","delay-in-days":366,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["FA8650-10-C-7088"],"award-info":[{"award-number":["FA8650-10-C-7088"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1546033 CNS-1330308 CNS-1065134"],"award-info":[{"award-number":["CNS-1546033 CNS-1330308 CNS-1065134"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,10,12]]},"DOI":"10.1145\/2810103.2813677","type":"proceedings-article","created":{"date-parts":[[2015,10,6]],"date-time":"2015-10-06T11:22:12Z","timestamp":1444130532000},"page":"1322-1333","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2284,"title":["Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures"],"prefix":"10.1145","author":[{"given":"Matt","family":"Fredrikson","sequence":"first","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Somesh","family":"Jha","sequence":"additional","affiliation":[{"name":"University of Wisconsin - Madison, Madison, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas","family":"Ristenpart","sequence":"additional","affiliation":[{"name":"Cornell Tech, New York City, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,10,12]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Conference on Computer Vision and Pattern Recognition (CVPR).","unstructured":"DeepFace: Closing the Gap to Human-Level Performance in Face Verification. In Conference on Computer Vision and Pattern Recognition (CVPR)."},{"key":"e_1_3_2_1_2_1","unstructured":"AT&T Laboratories Cambridge. The ORL database of faces. http:\/\/www.cl.cam.ac.uk\/research\/dtg\/attarchive\/facedatabase.html."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"e_1_3_2_1_4_1","unstructured":"BigML. https:\/\/www.bigml.com\/."},{"key":"e_1_3_2_1_5_1","article-title":"The OpenCV library","author":"Bradski G.","year":"2000","unstructured":"G. Bradski. The OpenCV library. Dr. Dobb's Journal of Software Tools, Jan. 2000.","journal-title":"Dr. Dobb's Journal of Software Tools"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2012.07.011"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020598"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/CIISP.2007.369304"},{"key":"e_1_3_2_1_9_1","volume-title":"Popular Science","author":"Dillow C.","year":"2010","unstructured":"C. Dillow. Augmented identity app helps you identify strangers on the street. Popular Science, Feb. 23 2010."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/773153.773173"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250790.1250804"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/2671225.2671227"},{"key":"e_1_3_2_1_14_1","unstructured":"Fredrikson M. and Jha S. and Ristenpart T. Model inversion attacks and basic countermeasures (Technical Report). Technical report 2015."},{"key":"e_1_3_2_1_15_1","volume-title":"Pylearn2: a machine learning research library. arXiv preprint arXiv:1308.4214","author":"Goodfellow I. J.","year":"2013","unstructured":"I. J. Goodfellow, D. Warde-Farley, P. Lamblin, V. Dumoulin, M. Mirza, R. Pascanu, J. Bergstra, F. Bastien, and Y. Bengio. Pylearn2: a machine learning research library. arXiv preprint arXiv:1308.4214, 2013."},{"key":"e_1_3_2_1_16_1","unstructured":"Google. Prediction API. https:\/\/cloud.google.com\/prediction\/."},{"key":"e_1_3_2_1_17_1","unstructured":"W. Hickey. FiveThirtyEight.com DataLab: How americans like their steak. http:\/\/fivethirtyeight.com\/datalab\/how-americans-like-their-steak\/ May 2014."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pgen.1000167"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/2354409.2354890"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1056\/NEJMoa0809329"},{"key":"e_1_3_2_1_21_1","unstructured":"Kairos AR Inc. Facial recognition API. https:\/\/developer.kairos.com\/docs."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/2627817.2627919"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806689.1806795"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2013.6712754"},{"key":"e_1_3_2_1_25_1","unstructured":"T. Komarova D. Nekipelov and E. Yakovlev. Estimation of Treatment Effects from Combined Data: Identification versus Data Security. NBER volume Economics of Digitization: An Agenda To appear."},{"key":"e_1_3_2_1_26_1","unstructured":"Lambda Labs. Facial recognition API. https:\/\/lambdal.com\/face-recognition-api."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553453"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516686"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1136\/jamia.2009.002725"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"},{"key":"e_1_3_2_1_31_1","unstructured":"Microsoft. Microsoft Azure Machine Learning."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.33"},{"key":"e_1_3_2_1_33_1","unstructured":"J. Prince. Social science research on pornography. http:\/\/byuresearch.org\/ssrp\/downloads\/GSShappiness.pdf."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1038\/ng.436"},{"key":"e_1_3_2_1_35_1","volume-title":"The New York Times","author":"Savage C.","year":"2013","unstructured":"C. Savage. Facial scanning is making gains in surveillance. The New York Times, Aug. 21 2013."},{"key":"e_1_3_2_1_36_1","unstructured":"SkyBiometry. Facial recognition API. https:\/\/www.skybiometry.com\/Documentation#faces\/recognize."},{"key":"e_1_3_2_1_37_1","volume-title":"General social surveys","author":"Smith T. W.","year":"1972","unstructured":"T. W. Smith, P. Marsden, M. Hout, and J. Kim. General social surveys, 1972-2012. National Opinion Research Center {producer}; The Roper Center for Public Opinion Research, University of Connecticut {distributor}, 2103."},{"key":"e_1_3_2_1_38_1","volume-title":"Simple demographics often identify people uniquely","author":"Sweeney L.","year":"2000","unstructured":"L. Sweeney. Simple demographics often identify people uniquely. 2000."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653726"},{"key":"e_1_3_2_1_40_1","unstructured":"Wise.io. http:\/\/www.wise.io\/."}],"event":{"name":"CCS'15: The 22nd ACM Conference on Computer and Communications Security","location":"Denver Colorado USA","acronym":"CCS'15","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2810103.2813677","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2810103.2813677","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2810103.2813677","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T09:32:19Z","timestamp":1763458339000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2810103.2813677"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,10,12]]},"references-count":40,"alternative-id":["10.1145\/2810103.2813677","10.1145\/2810103"],"URL":"https:\/\/doi.org\/10.1145\/2810103.2813677","relation":{},"subject":[],"published":{"date-parts":[[2015,10,12]]},"assertion":[{"value":"2015-10-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}