{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T14:58:13Z","timestamp":1784905093927,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3417238","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:20:06Z","timestamp":1614874806000},"page":"343-362","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":226,"title":["GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models"],"prefix":"10.1145","author":[{"given":"Dingfan","family":"Chen","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ning","family":"Yu","sequence":"additional","affiliation":[{"name":"University of Maryland & Max Planck Institute for Informatics, College Park, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Zhang","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mario","family":"Fritz","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Deep Learning with Differential Privacy. In ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 308--318","author":"Abadi Martin","year":"2016","unstructured":"Martin Abadi , Andy Chu , Ian Goodfellow , Brendan McMahan , Ilya Mironov , Kunal Talwar , and Li Zhang . 2016 . Deep Learning with Differential Privacy. In ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 308--318 . Martin Abadi, Andy Chu, Ian Goodfellow, Brendan McMahan, Ilya Mironov, Kunal Talwar, and Li Zhang. 2016. Deep Learning with Differential Privacy. In ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 308--318."},{"key":"e_1_3_2_2_2_1","volume-title":"Differentially Private Mixture of Generative Neural Networks. In International Conference on Data Mining (ICDM). IEEE, 715--720","author":"Acs Gergely","year":"2017","unstructured":"Gergely Acs , Luca Melis , Claude Castelluccia , and Emiliano De Cristofaro . 2017 . Differentially Private Mixture of Generative Neural Networks. In International Conference on Data Mining (ICDM). IEEE, 715--720 . Gergely Acs, Luca Melis, Claude Castelluccia, and Emiliano De Cristofaro. 2017. Differentially Private Mixture of Generative Neural Networks. In International Conference on Data Mining (ICDM). IEEE, 715--720."},{"key":"e_1_3_2_2_3_1","volume-title":"Wasserstein Generative Adversarial Networks. In International Conference on Machine Learning (ICML). JMLR, 214--223","author":"Arjovsky Martin","year":"2017","unstructured":"Martin Arjovsky , Soumith Chintala , and L\u00e9on Bottou . 2017 . Wasserstein Generative Adversarial Networks. In International Conference on Machine Learning (ICML). JMLR, 214--223 . Martin Arjovsky, Soumith Chintala, and L\u00e9on Bottou. 2017. Wasserstein Generative Adversarial Networks. In International Conference on Machine Learning (ICML). JMLR, 214--223."},{"key":"e_1_3_2_2_4_1","volume-title":"International Conference on Machine Learning (ICML). JMLR, 224--232","author":"Arora Sanjeev","year":"2017","unstructured":"Sanjeev Arora , Rong Ge , Yingyu Liang , Tengyu Ma , and Yi Zhang . 2017 . Generalization and Equilibrium in Generative Adversarial Nets (GANs) . In International Conference on Machine Learning (ICML). JMLR, 224--232 . Sanjeev Arora, Rong Ge, Yingyu Liang, Tengyu Ma, and Yi Zhang. 2017. Generalization and Equilibrium in Generative Adversarial Nets (GANs). In International Conference on Machine Learning (ICML). JMLR, 224--232."},{"key":"e_1_3_2_2_5_1","volume-title":"Membership Privacy in MicroRNA-based Studies. In ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 319--330","author":"Backes Michael","year":"2016","unstructured":"Michael Backes , Pascal Berrang , Mathias Humbert , and Praveen Manoharan . 2016 . Membership Privacy in MicroRNA-based Studies. In ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 319--330 . Michael Backes, Pascal Berrang, Mathias Humbert, and Praveen Manoharan. 2016. Membership Privacy in MicroRNA-based Studies. In ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 319--330."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133972"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1161\/CIRCOUTCOMES.118.005122"},{"key":"e_1_3_2_2_8_1","volume-title":"Distribution Matching. CoRR abs\/1909.12598","author":"Bhattacharyya Apratim","year":"2019","unstructured":"Apratim Bhattacharyya , Mario Fritz , and Bernt Schiele . 2019. \u201c Best-of-Many-Samples \u201d Distribution Matching. CoRR abs\/1909.12598 ( 2019 ). Apratim Bhattacharyya, Mario Fritz, and Bernt Schiele. 2019. \u201cBest-of-Many-Samples\u201d Distribution Matching. CoRR abs\/1909.12598 (2019)."},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2008.4587598"},{"key":"e_1_3_2_2_10_1","volume-title":"Large Scale GAN Training for High Fidelity Natural Image Synthesis. In International Conference on Learning Representations (ICLR).","author":"Brock Andrew","year":"2019","unstructured":"Andrew Brock , Jeff Donahue , and Karen Simonyan . 2019 . Large Scale GAN Training for High Fidelity Natural Image Synthesis. In International Conference on Learning Representations (ICLR). Andrew Brock, Jeff Donahue, and Karen Simonyan. 2019. Large Scale GAN Training for High Fidelity Natural Image Synthesis. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_11_1","volume-title":"GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators. CoRR abs\/2006.08265","author":"Chen Dingfan","year":"2020","unstructured":"Dingfan Chen , Tribhuvanesh Orekondy , and Mario Fritz . 2020. GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators. CoRR abs\/2006.08265 ( 2020 ). Dingfan Chen, Tribhuvanesh Orekondy, and Mario Fritz. 2020. GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators. CoRR abs\/2006.08265 (2020)."},{"key":"e_1_3_2_2_12_1","volume-title":"Generating Multi-label Discrete Patient Records using Generative Adversarial Networks. CoRR abs\/1703.06490","author":"Choi Edward","year":"2018","unstructured":"Edward Choi , Siddharth Biswal , Bradley Malin , Jon Duke , Walter F. Stewart , and Jimeng Sun . 2018. Generating Multi-label Discrete Patient Records using Generative Adversarial Networks. CoRR abs\/1703.06490 ( 2018 ). Edward Choi, Siddharth Biswal, Bradley Malin, Jon Duke, Walter F. Stewart, and Jimeng Sun. 2018. Generating Multi-label Discrete Patient Records using Generative Adversarial Networks. CoRR abs\/1703.06490 (2018)."},{"key":"e_1_3_2_2_13_1","volume-title":"NICE: Non-linear Independent Components Estimation. CoRR abs\/1410.8516","author":"Dinh Laurent","year":"2015","unstructured":"Laurent Dinh , David Krueger , and Yoshua Bengio . 2015 . NICE: Non-linear Independent Components Estimation. CoRR abs\/1410.8516 (2015). Laurent Dinh, David Krueger, and Yoshua Bengio. 2015. NICE: Non-linear Independent Components Estimation. CoRR abs\/1410.8516 (2015)."},{"key":"e_1_3_2_2_14_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Dinh Laurent","year":"2017","unstructured":"Laurent Dinh , Jascha Sohl-Dickstein , and Samy Bengio . 2017 . Density Estimation using Real NVP . In International Conference on Learning Representations (ICLR). Laurent Dinh, Jascha Sohl-Dickstein, and Samy Bengio. 2017. Density Estimation using Real NVP. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_15_1","volume-title":"Pattern Classification","author":"Duda Richard O","unstructured":"Richard O Duda , Peter E Hart , and David G Stork . 2012. Pattern Classification . John Wiley & Sons . Richard O Duda, Peter E Hart, and David G Stork. 2012. Pattern Classification. John Wiley & Sons."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"e_1_3_2_2_17_1","volume-title":"The Algorithmic Foundations of Differential Privacy","author":"Dwork Cynthia","unstructured":"Cynthia Dwork and Aaron Roth . 2014. The Algorithmic Foundations of Differential Privacy . Now Publishers Inc . Cynthia Dwork and Aaron Roth. 2014. The Algorithmic Foundations of Differential Privacy. Now Publishers Inc."},{"key":"e_1_3_2_2_18_1","volume-title":"Annual Symposium on Foundations of Computer Science (FOCS). IEEE, 650--669","author":"Dwork Cynthia","unstructured":"Cynthia Dwork , Adam D. Smith , Thomas Steinke , Jonathan Ullman , and Salil P. Vadhan . 2015. Robust Traceability from Trace Amounts . In Annual Symposium on Foundations of Computer Science (FOCS). IEEE, 650--669 . Cynthia Dwork, Adam D. Smith, Thomas Steinke, Jonathan Ullman, and Salil P. Vadhan. 2015. Robust Traceability from Trace Amounts. In Annual Symposium on Foundations of Computer Science (FOCS). IEEE, 650--669."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISBI.2018.8363576"},{"key":"e_1_3_2_2_20_1","volume-title":"Generative Adversarial Nets. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 2672--2680","author":"Goodfellow Ian","year":"2014","unstructured":"Ian Goodfellow , Jean Pouget-Abadie , Mehdi Mirza , Bing Xu , David Warde-Farley , Sherjil Ozair , Aaron Courville , and Yoshua Bengio . 2014 . Generative Adversarial Nets. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 2672--2680 . Ian Goodfellow, Jean Pouget-Abadie, Mehdi Mirza, Bing Xu, David Warde-Farley, Sherjil Ozair, Aaron Courville, and Yoshua Bengio. 2014. Generative Adversarial Nets. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 2672--2680."},{"key":"e_1_3_2_2_21_1","volume-title":"Speech Recognition with Deep Recurrent Neural Networks. In IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 6645--6649","author":"Graves Alex","unstructured":"Alex Graves , Abdel rahman Mohamed , and Geoffrey E. Hinton . 2013 . Speech Recognition with Deep Recurrent Neural Networks. In IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 6645--6649 . Alex Graves, Abdel rahman Mohamed, and Geoffrey E. Hinton. 2013. Speech Recognition with Deep Recurrent Neural Networks. In IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 6645--6649."},{"key":"e_1_3_2_2_22_1","volume-title":"Image Processing Using Multi-Code GAN Prior. CoRR abs\/1912.07116","author":"Gu Jinjin","year":"2019","unstructured":"Jinjin Gu , Yujun Shen , and Bolei Zhou . 2019. Image Processing Using Multi-Code GAN Prior. CoRR abs\/1912.07116 ( 2019 ). Jinjin Gu, Yujun Shen, and Bolei Zhou. 2019. Image Processing Using Multi-Code GAN Prior. CoRR abs\/1912.07116 (2019)."},{"key":"e_1_3_2_2_23_1","volume-title":"Improved Training of Wasserstein GANs. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 5767--5777","author":"Gulrajani Ishaan","unstructured":"Ishaan Gulrajani , Faruk Ahmed , Martin Arjovsky , Vincent Dumoulin , and Aaron C. Courville . 2017 . Improved Training of Wasserstein GANs. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 5767--5777 . Ishaan Gulrajani, Faruk Ahmed, Martin Arjovsky, Vincent Dumoulin, and Aaron C. Courville. 2017. Improved Training of Wasserstein GANs. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 5767--5777."},{"key":"e_1_3_2_2_24_1","volume-title":"MBeacon: Privacy-Preserving Beacons for DNA Methylation Data. In Network and Distributed System Security Symposium (NDSS). Internet Society.","author":"Hagestedt Inken","year":"2019","unstructured":"Inken Hagestedt , Yang Zhang , Mathias Humbert , Pascal Berrang , Haixu Tang , XiaoFeng Wang , and Michael Backes . 2019 . MBeacon: Privacy-Preserving Beacons for DNA Methylation Data. In Network and Distributed System Security Symposium (NDSS). Internet Society. Inken Hagestedt, Yang Zhang, Mathias Humbert, Pascal Berrang, Haixu Tang, XiaoFeng Wang, and Michael Backes. 2019. MBeacon: Privacy-Preserving Beacons for DNA Methylation Data. In Network and Distributed System Security Symposium (NDSS). Internet Society."},{"key":"e_1_3_2_2_25_1","volume-title":"LOGAN: Evaluating Privacy Leakage of Generative Models Using Generative Adversarial Networks. Symposium on Privacy Enhancing Technologies Symposium","author":"Hayes Jamie","year":"2019","unstructured":"Jamie Hayes , Luca Melis , George Danezis , and Emiliano De Cristofaro . 2019 . LOGAN: Evaluating Privacy Leakage of Generative Models Using Generative Adversarial Networks. Symposium on Privacy Enhancing Technologies Symposium (2019). Jamie Hayes, Luca Melis, George Danezis, and Emiliano De Cristofaro. 2019. LOGAN: Evaluating Privacy Leakage of Generative Models Using Generative Adversarial Networks. Symposium on Privacy Enhancing Technologies Symposium (2019)."},{"key":"e_1_3_2_2_26_1","volume-title":"Deep Residual Learning for Image Recognition. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 770--778","author":"He Kaiming","year":"2016","unstructured":"Kaiming He , Xiangyu Zhang , Shaoqing Ren , and Jian Sun . 2016 . Deep Residual Learning for Image Recognition. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 770--778 . Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016. Deep Residual Learning for Image Recognition. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 770--778."},{"key":"e_1_3_2_2_27_1","volume-title":"AttGAN: Facial Attribute Editing by Only Changing What You Want. CoRR abs\/1711.10678","author":"He Zhenliang","year":"2018","unstructured":"Zhenliang He , Wangmeng Zuo , Meina Kan , Shiguang Shan , and Xilin Chen . 2018. AttGAN: Facial Attribute Editing by Only Changing What You Want. CoRR abs\/1711.10678 ( 2018 ). Zhenliang He, Wangmeng Zuo, Meina Kan, Shiguang Shan, and Xilin Chen. 2018. AttGAN: Facial Attribute Editing by Only Changing What You Want. CoRR abs\/1711.10678 (2018)."},{"key":"e_1_3_2_2_28_1","volume-title":"Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 6626--6637","author":"Heusel Martin","year":"2017","unstructured":"Martin Heusel , Hubert Ramsauer , Thomas Unterthiner , Bernhard Nessler , and Sepp Hochreiter . 2017 . GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium . In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 6626--6637 . Martin Heusel, Hubert Ramsauer, Thomas Unterthiner, Bernhard Nessler, and Sepp Hochreiter. 2017. GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 6626--6637."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0067"},{"key":"e_1_3_2_2_30_1","volume-title":"Navdeep Jaitly, Andrew Senior, Vincent Vanhoucke, Patrick Nguyen, Brian Kingsbury, et al.","author":"Hinton Geoffrey","year":"2012","unstructured":"Geoffrey Hinton , Li Deng , Dong Yu , George Dahl , Abdel rahman Mohamed , Navdeep Jaitly, Andrew Senior, Vincent Vanhoucke, Patrick Nguyen, Brian Kingsbury, et al. 2012 . Deep Neural Networks for Acoustic Modeling in Speech Recognition. IEEE Signal Processing Magazine , Vol. 29 (2012). Geoffrey Hinton, Li Deng, Dong Yu, George Dahl, Abdel rahman Mohamed, Navdeep Jaitly, Andrew Senior, Vincent Vanhoucke, Patrick Nguyen, Brian Kingsbury, et al. 2012. Deep Neural Networks for Acoustic Modeling in Speech Recognition. IEEE Signal Processing Magazine, Vol. 29 (2012)."},{"key":"e_1_3_2_2_31_1","unstructured":"Gary B Huang Marwan Mattar Tamara Berg and Eric Learned-Miller. 2008. Labeled Faces in the Wild: A Database for Studying Face Recognition in Unconstrained Environments.  Gary B Huang Marwan Mattar Tamara Berg and Eric Learned-Miller. 2008. Labeled Faces in the Wild: A Database for Studying Face Recognition in Unconstrained Environments."},{"key":"e_1_3_2_2_32_1","volume-title":"\u201cSteerability","author":"Jahanian Ali","year":"1907","unstructured":"Ali Jahanian , Lucy Chai , and Phillip Isola . 2019. On the \u201cSteerability \u201d of Generative Adversarial Networks. CoRR abs\/ 1907 .07171 (2019). Ali Jahanian, Lucy Chai, and Phillip Isola. 2019. On the \u201cSteerability\u201d of Generative Adversarial Networks. CoRR abs\/1907.07171 (2019)."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363201"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1038\/sdata.2016.35"},{"key":"e_1_3_2_2_35_1","volume-title":"PATE-GAN: Generating Synthetic Data with Differential Privacy Guarantees. OpenReview","author":"Jordon James","year":"2019","unstructured":"James Jordon , Jinsung Yoon , and Mihaela van der Schaar . 2019. PATE-GAN: Generating Synthetic Data with Differential Privacy Guarantees. OpenReview ( 2019 ). James Jordon, Jinsung Yoon, and Mihaela van der Schaar. 2019. PATE-GAN: Generating Synthetic Data with Differential Privacy Guarantees. OpenReview (2019)."},{"key":"e_1_3_2_2_36_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Karras Tero","year":"2018","unstructured":"Tero Karras , Timo Aila , Samuli Laine , and Jaakko Lehtinen . 2018 . Progressive Growing of GANs for Improved Quality, Stability, and Variation . In International Conference on Learning Representations (ICLR). Tero Karras, Timo Aila, Samuli Laine, and Jaakko Lehtinen. 2018. Progressive Growing of GANs for Improved Quality, Stability, and Variation. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00453"},{"key":"e_1_3_2_2_38_1","volume-title":"Analyzing and Improving the Image Quality of StyleGAN. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 8107--8116","author":"Karras Tero","year":"2020","unstructured":"Tero Karras , Samuli Laine , Miika Aittala , Janne Hellsten , Jaakko Lehtinen , and Timo Aila . 2020 . Analyzing and Improving the Image Quality of StyleGAN. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 8107--8116 . Tero Karras, Samuli Laine, Miika Aittala, Janne Hellsten, Jaakko Lehtinen, and Timo Aila. 2020. Analyzing and Improving the Image Quality of StyleGAN. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 8107--8116."},{"key":"e_1_3_2_2_39_1","volume-title":"Adam: A Method for Stochastic Optimization. In International Conference on Learning Representations (ICLR).","author":"Diederik","unstructured":"Diederik P. Kingma and Jimmy Ba. 2015 . Adam: A Method for Stochastic Optimization. In International Conference on Learning Representations (ICLR). Diederik P. Kingma and Jimmy Ba. 2015. Adam: A Method for Stochastic Optimization. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_40_1","volume-title":"Annual Conference on Neural Information Processing Systems (NeurIPS). NeurIPS, 10236--10245","author":"Diederik","unstructured":"Diederik P. Kingma and Prafulla Dhariwal. 2018. Glow: Generative Flow with Invertible 1x1 Convolutions . In Annual Conference on Neural Information Processing Systems (NeurIPS). NeurIPS, 10236--10245 . Diederik P. Kingma and Prafulla Dhariwal. 2018. Glow: Generative Flow with Invertible 1x1 Convolutions. In Annual Conference on Neural Information Processing Systems (NeurIPS). NeurIPS, 10236--10245."},{"key":"e_1_3_2_2_41_1","volume-title":"Auto-Encoding Variational Bayes. In International Conference on Learning Representations (ICLR).","author":"Diederik","unstructured":"Diederik P. Kingma and Max Welling. 2014 . Auto-Encoding Variational Bayes. In International Conference on Learning Representations (ICLR). Diederik P. Kingma and Max Welling. 2014. Auto-Encoding Variational Bayes. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_42_1","volume-title":"ImageNet Classification with Deep Convolutional Neural Networks. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 1106--1114","author":"Krizhevsky Alex","unstructured":"Alex Krizhevsky , Ilya Sutskever , and Geoffrey E. Hinton . 2012 . ImageNet Classification with Deep Convolutional Neural Networks. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 1106--1114 . Alex Krizhevsky, Ilya Sutskever, and Geoffrey E. Hinton. 2012. ImageNet Classification with Deep Convolutional Neural Networks. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 1106--1114."},{"key":"e_1_3_2_2_43_1","volume-title":"International Conference on Machine Learning (ICML). JMLR, 1558--1566","author":"Lindbo Larsen Anders Boesen","year":"2016","unstructured":"Anders Boesen Lindbo Larsen , S\u00f8ren Kaae S\u00f8nderby , Hugo Larochelle , and Ole Winther . 2016 . Autoencoding beyond Pixels Using a Learned Similarity Metric . In International Conference on Machine Learning (ICML). JMLR, 1558--1566 . Anders Boesen Lindbo Larsen, S\u00f8ren Kaae S\u00f8nderby, Hugo Larochelle, and Ole Winther. 2016. Autoencoding beyond Pixels Using a Learned Similarity Metric. In International Conference on Machine Learning (ICML). JMLR, 1558--1566."},{"key":"e_1_3_2_2_44_1","volume-title":"Precomputed Real-Time Texture Synthesis with Markovian Generative Adversarial Networks. In European Conference on Computer Vision (ECCV). Springer, 702--716","author":"Li Chuan","year":"2016","unstructured":"Chuan Li and Michael Wand . 2016 . Precomputed Real-Time Texture Synthesis with Markovian Generative Adversarial Networks. In European Conference on Computer Vision (ECCV). Springer, 702--716 . Chuan Li and Michael Wand. 2016. Precomputed Real-Time Texture Synthesis with Markovian Generative Adversarial Networks. In European Conference on Computer Vision (ECCV). Springer, 702--716."},{"key":"e_1_3_2_2_45_1","volume-title":"Label-Leaks: Membership Inference Attack with Label. CoRR abs\/2007.15528","author":"Li Zheng","year":"2020","unstructured":"Zheng Li and Yang Zhang . 2020. Label-Leaks: Membership Inference Attack with Label. CoRR abs\/2007.15528 ( 2020 ). Zheng Li and Yang Zhang. 2020. Label-Leaks: Membership Inference Attack with Label. CoRR abs\/2007.15528 (2020)."},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.5555\/3112655.3112866"},{"key":"e_1_3_2_2_47_1","volume-title":"Deep Learning Face Attributes in the Wild. In IEEE International Conference on Computer Vision (ICCV). IEEE, 3730--3738","author":"Liu Ziwei","year":"2015","unstructured":"Ziwei Liu , Ping Luo , Xiaogang Wang , and Xiaoou Tang . 2015 . Deep Learning Face Attributes in the Wild. In IEEE International Conference on Computer Vision (ICCV). IEEE, 3730--3738 . Ziwei Liu, Ping Luo, Xiaogang Wang, and Xiaoou Tang. 2015. Deep Learning Face Attributes in the Wild. In IEEE International Conference on Computer Vision (ICCV). IEEE, 3730--3738."},{"key":"e_1_3_2_2_48_1","volume-title":"Understanding Membership Inferences on Well-Generalized Learning Models. CoRR abs\/1802.04889","author":"Long Yunhui","year":"2018","unstructured":"Yunhui Long , Vincent Bindschaedler , Lei Wang , Diyue Bu , Xiaofeng Wang , Haixu Tang , Carl A. Gunter , and Kai Chen . 2018. Understanding Membership Inferences on Well-Generalized Learning Models. CoRR abs\/1802.04889 ( 2018 ). Yunhui Long, Vincent Bindschaedler, Lei Wang, Diyue Bu, Xiaofeng Wang, Haixu Tang, Carl A. Gunter, and Kai Chen. 2018. Understanding Membership Inferences on Well-Generalized Learning Models. CoRR abs\/1802.04889 (2018)."},{"key":"e_1_3_2_2_49_1","volume-title":"SampleRNN: An Unconditional End-to-End Neural Audio Generation Model. In International Conference on Learning Representations (ICLR).","author":"Mehri Soroush","year":"2017","unstructured":"Soroush Mehri , Kundan Kumar , Ishaan Gulrajani , Rithesh Kumar , Shubham Jain , Jose Sotelo , Aaron C. Courville , and Yoshua Bengio . 2017 . SampleRNN: An Unconditional End-to-End Neural Audio Generation Model. In International Conference on Learning Representations (ICLR). Soroush Mehri, Kundan Kumar, Ishaan Gulrajani, Rithesh Kumar, Shubham Jain, Jose Sotelo, Aaron C. Courville, and Yoshua Bengio. 2017. SampleRNN: An Unconditional End-to-End Neural Audio Generation Model. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_50_1","volume-title":"Exploiting Unintended Feature Leakage in Collaborative Learning. In IEEE Symposium on Security and Privacy (S&P). IEEE, 497--512","author":"Melis Luca","year":"2019","unstructured":"Luca Melis , Congzheng Song , Emiliano De Cristofaro , and Vitaly Shmatikov . 2019 . Exploiting Unintended Feature Leakage in Collaborative Learning. In IEEE Symposium on Security and Privacy (S&P). IEEE, 497--512 . Luca Melis, Congzheng Song, Emiliano De Cristofaro, and Vitaly Shmatikov. 2019. Exploiting Unintended Feature Leakage in Collaborative Learning. In IEEE Symposium on Security and Privacy (S&P). IEEE, 497--512."},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"e_1_3_2_2_52_1","volume-title":"IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 2536--2544","author":"Pathak Deepak","unstructured":"Deepak Pathak , Philipp Kr\"ahenb \u00fchl , Jeff Donahue , Trevor Darrell , and Alexei A. Efros . 2016. Context Encoders: Feature Learning by Inpainting . In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 2536--2544 . Deepak Pathak, Philipp Kr\"ahenb\u00fchl, Jeff Donahue, Trevor Darrell, and Alexei A. Efros. 2016. Context Encoders: Feature Learning by Inpainting. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 2536--2544."},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/7.2.155"},{"key":"e_1_3_2_2_54_1","volume-title":"Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks. CoRR abs\/1511.06434","author":"Radford Alec","year":"2015","unstructured":"Alec Radford , Luke Metz , and Soumith Chintala . 2015. Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks. CoRR abs\/1511.06434 ( 2015 ). Alec Radford, Luke Metz, and Soumith Chintala. 2015. Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks. CoRR abs\/1511.06434 (2015)."},{"key":"e_1_3_2_2_55_1","volume-title":"Stochastic Backpropagation and Approximate Inference in Deep Generative Models. CoRR abs\/1401.4082","author":"Rezende Danilo Jimenez","year":"2014","unstructured":"Danilo Jimenez Rezende , Shakir Mohamed , and Daan Wierstra . 2014. Stochastic Backpropagation and Approximate Inference in Deep Generative Models. CoRR abs\/1401.4082 ( 2014 ). Danilo Jimenez Rezende, Shakir Mohamed, and Daan Wierstra. 2014. Stochastic Backpropagation and Approximate Inference in Deep Generative Models. CoRR abs\/1401.4082 (2014)."},{"key":"e_1_3_2_2_56_1","volume-title":"ImageNet Large Scale Visual Recognition Challenge. CoRR abs\/1409.0575","author":"Russakovsky Olga","year":"2015","unstructured":"Olga Russakovsky , Jia Deng , Hao Su , Jonathan Krause , Sanjeev Satheesh , Sean Ma , Zhiheng Huang , Andrej Karpathy , Aditya Khosla , Michael Bernstein , Alexander C. Berg , and Li Fei-Fei . 2015. ImageNet Large Scale Visual Recognition Challenge. CoRR abs\/1409.0575 ( 2015 ). Olga Russakovsky, Jia Deng, Hao Su, Jonathan Krause, Sanjeev Satheesh, Sean Ma, Zhiheng Huang, Andrej Karpathy, Aditya Khosla, Michael Bernstein, Alexander C. Berg, and Li Fei-Fei. 2015. ImageNet Large Scale Visual Recognition Challenge. CoRR abs\/1409.0575 (2015)."},{"key":"e_1_3_2_2_57_1","volume-title":"International Conference on Machine Learning (ICML). JMLR, 5558--5567","author":"Sablayrolles Alexandre","year":"2019","unstructured":"Alexandre Sablayrolles , Matthijs Douze , Cordelia Schmid , Yann Ollivier , and Herv\u00e9 J\u00e9gou . 2019 . White-box vs Black-box: Bayes Optimal Strategies for Membership Inference . In International Conference on Machine Learning (ICML). JMLR, 5558--5567 . Alexandre Sablayrolles, Matthijs Douze, Cordelia Schmid, Yann Ollivier, and Herv\u00e9 J\u00e9gou. 2019. White-box vs Black-box: Bayes Optimal Strategies for Membership Inference. In International Conference on Machine Learning (ICML). JMLR, 5558--5567."},{"key":"e_1_3_2_2_58_1","volume-title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Network and Distributed System Security Symposium (NDSS). Internet Society.","author":"Salem Ahmed","year":"2019","unstructured":"Ahmed Salem , Yang Zhang , Mathias Humbert , Pascal Berrang , Mario Fritz , and Michael Backes . 2019 . ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Network and Distributed System Security Symposium (NDSS). Internet Society. Ahmed Salem, Yang Zhang, Mathias Humbert, Pascal Berrang, Mario Fritz, and Michael Backes. 2019. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Network and Distributed System Security Symposium (NDSS). Internet Society."},{"key":"e_1_3_2_2_59_1","volume-title":"Improved Techniques for Training GANs. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 2226--2234","author":"Salimans Tim","year":"2016","unstructured":"Tim Salimans , Ian J. Goodfellow , Wojciech Zaremba , Vicki Cheung , Alec Radford , and Xi Chen . 2016 . Improved Techniques for Training GANs. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 2226--2234 . Tim Salimans, Ian J. Goodfellow, Wojciech Zaremba, Vicki Cheung, Alec Radford, and Xi Chen. 2016. Improved Techniques for Training GANs. In Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 2226--2234."},{"key":"e_1_3_2_2_60_1","volume-title":"Membership Inference Attacks Against Machine Learning Models. In IEEE Symposium on Security and Privacy (S&P). IEEE, 3--18","author":"Shokri Reza","year":"2017","unstructured":"Reza Shokri , Marco Stronati , Congzheng Song , and Vitaly Shmatikov . 2017 . Membership Inference Attacks Against Machine Learning Models. In IEEE Symposium on Security and Privacy (S&P). IEEE, 3--18 . Reza Shokri, Marco Stronati, Congzheng Song, and Vitaly Shmatikov. 2017. Membership Inference Attacks Against Machine Learning Models. In IEEE Symposium on Security and Privacy (S&P). IEEE, 3--18."},{"key":"e_1_3_2_2_61_1","volume-title":"Very Deep Convolutional Networks for Large-Scale Image Recognition. In International Conference on Learning Representations (ICLR).","author":"Simonyan Karen","year":"2015","unstructured":"Karen Simonyan and Andrew Zisserman . 2015 . Very Deep Convolutional Networks for Large-Scale Image Recognition. In International Conference on Learning Representations (ICLR). Karen Simonyan and Andrew Zisserman. 2015. Very Deep Convolutional Networks for Large-Scale Image Recognition. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_62_1","volume-title":"Going Deeper with Convolutions. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 1--9.","author":"Szegedy Christian","year":"2015","unstructured":"Christian Szegedy , Wei Liu , Yangqing Jia , Pierre Sermanet , Scott E. Reed , Dragomir Anguelov , Dumitru Erhan , Vincent Vanhoucke , and Andrew Rabinovich . 2015 . Going Deeper with Convolutions. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 1--9. Christian Szegedy, Wei Liu, Yangqing Jia, Pierre Sermanet, Scott E. Reed, Dragomir Anguelov, Dumitru Erhan, Vincent Vanhoucke, and Andrew Rabinovich. 2015. Going Deeper with Convolutions. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 1--9."},{"key":"e_1_3_2_2_63_1","first-page":"26","article-title":"Lecture 6.5-rmsprop: Divide the Gradient by a Running average of its Recent Magnitude","volume":"4","author":"Tieleman Tijmen","year":"2012","unstructured":"Tijmen Tieleman and Geoffrey Hinton . 2012 . Lecture 6.5-rmsprop: Divide the Gradient by a Running average of its Recent Magnitude . COURSERA: Neural Networks for Machine Learning , Vol. 4 , 2 (2012), 26 -- 31 . Tijmen Tieleman and Geoffrey Hinton. 2012. Lecture 6.5-rmsprop: Divide the Gradient by a Running average of its Recent Magnitude. COURSERA: Neural Networks for Machine Learning, Vol. 4, 2 (2012), 26--31.","journal-title":"COURSERA: Neural Networks for Machine Learning"},{"key":"e_1_3_2_2_64_1","volume-title":"WaveNet: A Generative Model for Raw Audio. CoRR abs\/1609.03499","author":"van den Oord Aaron","year":"2016","unstructured":"Aaron van den Oord , Sander Dieleman , Heiga Zen , Karen Simonyan , Oriol Vinyals , Alex Graves , Nal Kalchbrenner , Andrew Senior , and Koray Kavukcuoglu . 2016. WaveNet: A Generative Model for Raw Audio. CoRR abs\/1609.03499 ( 2016 ). Aaron van den Oord, Sander Dieleman, Heiga Zen, Karen Simonyan, Oriol Vinyals, Alex Graves, Nal Kalchbrenner, Andrew Senior, and Koray Kavukcuoglu. 2016. WaveNet: A Generative Model for Raw Audio. CoRR abs\/1609.03499 (2016)."},{"key":"e_1_3_2_2_65_1","volume-title":"Show and Tell: A Neural Image Caption Generator. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 3156--3164","author":"Vinyals Oriol","year":"2015","unstructured":"Oriol Vinyals , Alexander Toshev , Samy Bengio , and Dumitru Erhan . 2015 . Show and Tell: A Neural Image Caption Generator. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 3156--3164 . Oriol Vinyals, Alexander Toshev, Samy Bengio, and Dumitru Erhan. 2015. Show and Tell: A Neural Image Caption Generator. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 3156--3164."},{"key":"e_1_3_2_2_66_1","volume-title":"Differentially Private Generative Adversarial Network. CoRR abs\/1802.06739","author":"Xie Liyang","year":"2018","unstructured":"Liyang Xie , Kaixiang Lin , Shu Wang , Fei Wang , and Jiayu Zhou . 2018. Differentially Private Generative Adversarial Network. CoRR abs\/1802.06739 ( 2018 ). Liyang Xie, Kaixiang Lin, Shu Wang, Fei Wang, and Jiayu Zhou. 2018. Differentially Private Generative Adversarial Network. CoRR abs\/1802.06739 (2018)."},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_47"},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_2_69_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2019.101552"},{"key":"e_1_3_2_2_70_1","volume-title":"Texture Mixer: A Network for Controllable Synthesis and Interpolation of Texture. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 12164--12173","author":"Yu Ning","year":"2019","unstructured":"Ning Yu , Connelly Barnes , Eli Shechtman , Sohrab Amirghodsi , and Michal Luk\u00e1 c. 2019 . Texture Mixer: A Network for Controllable Synthesis and Interpolation of Texture. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 12164--12173 . Ning Yu, Connelly Barnes, Eli Shechtman, Sohrab Amirghodsi, and Michal Luk\u00e1 c. 2019. Texture Mixer: A Network for Controllable Synthesis and Interpolation of Texture. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, 12164--12173."},{"key":"e_1_3_2_2_71_1","volume-title":"Inclusive GAN: Improving Data and Minority Coverage in Generative Models. In European Conference on Computer Vision (ECCV). Springer.","author":"Yu Ning","year":"2020","unstructured":"Ning Yu , Ke Li , Peng Zhou , Jitendra Malik , Larry Davis , and Mario Fritz . 2020 . Inclusive GAN: Improving Data and Minority Coverage in Generative Models. In European Conference on Computer Vision (ECCV). Springer. Ning Yu, Ke Li, Peng Zhou, Jitendra Malik, Larry Davis, and Mario Fritz. 2020. Inclusive GAN: Improving Data and Minority Coverage in Generative Models. In European Conference on Computer Vision (ECCV). Springer."},{"key":"e_1_3_2_2_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"e_1_3_2_2_73_1","volume-title":"echnical Report). CoRR abs\/1801.01594","author":"Zhang Xinyang","year":"2018","unstructured":"Xinyang Zhang , Shouling Ji , and Ting Wang . 2018b. Differentially Private Releasing via Deep Generative Model ( T echnical Report). CoRR abs\/1801.01594 ( 2018 ). Xinyang Zhang, Shouling Ji, and Ting Wang. 2018b. Differentially Private Releasing via Deep Generative Model (Technical Report). CoRR abs\/1801.01594 (2018)."}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417238","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417238","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:33:25Z","timestamp":1750199605000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417238"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":73,"alternative-id":["10.1145\/3372297.3417238","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3417238","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}