{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,24]],"date-time":"2026-10-24T19:23:38Z","timestamp":1792869818667,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":80,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3417270","type":"proceedings-article","created":{"date-parts":[[2020,11,2]],"date-time":"2020-11-02T13:27:02Z","timestamp":1604323622000},"page":"377-390","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":167,"title":["Information Leakage in Embedding Models"],"prefix":"10.1145","author":[{"given":"Congzheng","family":"Song","sequence":"first","affiliation":[{"name":"Cornell University & Google Brain, New York, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ananth","family":"Raghunathan","sequence":"additional","affiliation":[{"name":"Facebook & Google Brain, Melon Park, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_2_2_1","volume-title":"code2vec: Learning distributed representations of code. POPL","author":"Alon Uri","year":"2019"},{"key":"e_1_3_2_2_3_1","volume-title":"Enriching Word Vectors with Subword Information. TACL","author":"Bojanowski Piotr","year":"2017"},{"key":"e_1_3_2_2_4_1","unstructured":"Nicholas Carlini Chang Liu \u00dalfar Erlingsson Jernej Kos and Dawn Song. 2019. The secret sharer: Evaluating and testing unintended memorization in neural networks. In USENIX Security .  Nicholas Carlini Chang Liu \u00dalfar Erlingsson Jernej Kos and Dawn Song. 2019. The secret sharer: Evaluating and testing unintended memorization in neural networks. In USENIX Security ."},{"key":"e_1_3_2_2_5_1","volume-title":"Noah Constant, Mario Guajardo-Cespedes, Steve Yuan, Chris Tar, et almbox.","author":"Cer Daniel","year":"2018"},{"key":"e_1_3_2_2_6_1","volume-title":"Privacy Partitioning: Protecting User Data During the Deep Learning Inference Phase. arXiv preprint","author":"Chi Jianfeng","year":"2018"},{"key":"e_1_3_2_2_7_1","volume-title":"Learning cross-lingual sentence representations via a multi-task dual-encoder model. arXiv preprint","author":"Chidambaram Muthuraman","year":"2018"},{"key":"e_1_3_2_2_8_1","volume-title":"Andy Schuetz, Walter F Stewart, and Jimeng Sun.","author":"Choi Edward","year":"2016"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"crossref","unstructured":"Maximin Coavoux Shashi Narayan and Shay B Cohen. 2018. Privacy-preserving Neural Representations of Text. In EMNLP .  Maximin Coavoux Shashi Narayan and Shay B Cohen. 2018. Privacy-preserving Neural Representations of Text. In EMNLP .","DOI":"10.18653\/v1\/D18-1001"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"crossref","unstructured":"Alexis Conneau Douwe Kiela Holger Schwenk Lo\"ic Barrault and Antoine Bordes. 2017. Supervised Learning of Universal Sentence Representations from Natural Language Inference Data. In EMNLP .  Alexis Conneau Douwe Kiela Holger Schwenk Lo\"ic Barrault and Antoine Bordes. 2017. Supervised Learning of Universal Sentence Representations from Natural Language Inference Data. In EMNLP .","DOI":"10.18653\/v1\/D17-1070"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"crossref","unstructured":"Paul Covington Jay Adams and Emre Sargin. 2016. Deep neural networks for youtube recommendations. In RecSys .  Paul Covington Jay Adams and Emre Sargin. 2016. Deep neural networks for youtube recommendations. In RecSys .","DOI":"10.1145\/2959100.2959190"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"crossref","unstructured":"Amine Dadoun Rapha\u00ebl Troncy Olivier Ratier and Riccardo Petitti. 2019. Location Embeddings for Next Trip Recommendation. In WWW .  Amine Dadoun Rapha\u00ebl Troncy Olivier Ratier and Riccardo Petitti. 2019. Location Embeddings for Next Trip Recommendation. In WWW .","DOI":"10.1145\/3308560.3316535"},{"key":"e_1_3_2_2_13_1","volume-title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding. In NAACL .","author":"Devlin Jacob","year":"2019"},{"key":"e_1_3_2_2_14_1","volume-title":"International Workshop on Paraphrasing .","author":"Dolan William B","year":"2005"},{"key":"e_1_3_2_2_15_1","unstructured":"Alexey Dosovitskiy and Thomas Brox. 2016a. Generating images with perceptual similarity metrics based on deep networks. In CVPR .  Alexey Dosovitskiy and Thomas Brox. 2016a. Generating images with perceptual similarity metrics based on deep networks. In CVPR ."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"crossref","unstructured":"Alexey Dosovitskiy and Thomas Brox. 2016b. Inverting visual representations with convolutional networks. In CVPR .  Alexey Dosovitskiy and Thomas Brox. 2016b. Inverting visual representations with convolutional networks. In CVPR .","DOI":"10.1109\/CVPR.2016.522"},{"key":"e_1_3_2_2_17_1","unstructured":"Harrison Edwards and Amos Storkey. 2015. Censoring representations with an adversary. In ICLR .  Harrison Edwards and Amos Storkey. 2015. Censoring representations with an adversary. In ICLR ."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"crossref","unstructured":"Yanai Elazar and Yoav Goldberg. 2018. Adversarial removal of demographic attributes from text data. In EMNLP .  Yanai Elazar and Yoav Goldberg. 2018. Adversarial removal of demographic attributes from text data. In EMNLP .","DOI":"10.18653\/v1\/D18-1002"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"crossref","unstructured":"Matt Fredrikson Somesh Jha and Thomas Ristenpart. 2015. Model inversion attacks that exploit confidence information and basic countermeasures. In CCS .  Matt Fredrikson Somesh Jha and Thomas Ristenpart. 2015. Model inversion attacks that exploit confidence information and basic countermeasures. In CCS .","DOI":"10.1145\/2810103.2813677"},{"key":"e_1_3_2_2_20_1","unstructured":"Yaroslav Ganin and Victor Lempitsky. 2015. Unsupervised domain adaptation by backpropagation. In ICML .  Yaroslav Ganin and Victor Lempitsky. 2015. Unsupervised domain adaptation by backpropagation. In ICML ."},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"crossref","unstructured":"Aditya Grover and Jure Leskovec. 2016. node2vec: Scalable feature learning for networks. In KDD .  Aditya Grover and Jure Leskovec. 2016. node2vec: Scalable feature learning for networks. In KDD .","DOI":"10.1145\/2939672.2939754"},{"key":"e_1_3_2_2_22_1","volume-title":"et almbox","author":"Hannun Awni","year":"2014"},{"key":"e_1_3_2_2_23_1","volume-title":"LOGAN: Membership inference attacks against generative models. PETS","author":"Hayes Jamie","year":"2019"},{"key":"e_1_3_2_2_24_1","unstructured":"Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2016. Deep residual learning for image recognition. In CVPR .  Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2016. Deep residual learning for image recognition. In CVPR ."},{"key":"e_1_3_2_2_25_1","unstructured":"Xiangnan He Lizi Liao Hanwang Zhang Liqiang Nie Xia Hu and Tat-Seng Chua. 2017. Neural collaborative filtering. In WWW .  Xiangnan He Lizi Liao Hanwang Zhang Liqiang Nie Xia Hu and Tat-Seng Chua. 2017. Neural collaborative filtering. In WWW ."},{"key":"e_1_3_2_2_26_1","volume-title":"Efficient natural language response suggestion for smart reply. arXiv preprint","author":"Henderson Matthew","year":"2017"},{"key":"e_1_3_2_2_27_1","volume-title":"Long short-term memory. Neural computation","author":"Hochreiter Sepp","year":"1997"},{"key":"e_1_3_2_2_28_1","volume-title":"Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLoS genetics","author":"Homer Nils","year":"2008"},{"key":"e_1_3_2_2_29_1","unstructured":"Eric Jang Shixiang Gu and Ben Poole. 2017. Categorical reparameterization with gumbel-softmax. In ICLR .  Eric Jang Shixiang Gu and Ben Poole. 2017. Categorical reparameterization with gumbel-softmax. In ICLR ."},{"key":"e_1_3_2_2_30_1","volume-title":"et almbox","author":"Kannan Anjuli","year":"2016"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"crossref","unstructured":"Yoon Kim. 2014. Convolutional Neural Networks for Sentence Classification. In EMNLP .  Yoon Kim. 2014. Convolutional Neural Networks for Sentence Classification. In EMNLP .","DOI":"10.3115\/v1\/D14-1181"},{"key":"e_1_3_2_2_32_1","volume-title":"Adam: A method for stochastic optimization. arXiv preprint","author":"Kingma Diederik P","year":"2014"},{"key":"e_1_3_2_2_33_1","unstructured":"Ryan Kiros Yukun Zhu Ruslan R Salakhutdinov Richard Zemel Raquel Urtasun Antonio Torralba and Sanja Fidler. 2015. Skip-thought vectors. In NeurIPS .  Ryan Kiros Yukun Zhu Ruslan R Salakhutdinov Richard Zemel Raquel Urtasun Antonio Torralba and Sanja Fidler. 2015. Skip-thought vectors. In NeurIPS ."},{"key":"e_1_3_2_2_34_1","unstructured":"Alex Krizhevsky Ilya Sutskever and Geoffrey E Hinton. 2012. Imagenet classification with deep convolutional neural networks. In NeurIPS .  Alex Krizhevsky Ilya Sutskever and Geoffrey E Hinton. 2012. Imagenet classification with deep convolutional neural networks. In NeurIPS ."},{"key":"e_1_3_2_2_35_1","volume-title":"Albert: A lite bert for self-supervised learning of language representations. arXiv preprint","author":"Lan Zhenzhong","year":"2019"},{"key":"e_1_3_2_2_36_1","volume-title":"PrivyNet: A Flexible Framework for Privacy-Preserving Deep Neural Network Training. arXiv preprint","author":"Li Meng","year":"2017"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"crossref","unstructured":"Xin Li and Dan Roth. 2002. Learning question classifiers. In COLING .  Xin Li and Dan Roth. 2002. Learning question classifiers. In COLING .","DOI":"10.3115\/1072228.1072378"},{"key":"e_1_3_2_2_38_1","unstructured":"Yitong Li Timothy Baldwin and Trevor Cohn. 2018. Towards Robust and Privacy-preserving Text Representations. In ACL .  Yitong Li Timothy Baldwin and Trevor Cohn. 2018. Towards Robust and Privacy-preserving Text Representations. In ACL ."},{"key":"e_1_3_2_2_39_1","unstructured":"Lajanugen Logeswaran and Honglak Lee. 2018. An efficient framework for learning sentence representations. In ICLR .  Lajanugen Logeswaran and Honglak Lee. 2018. An efficient framework for learning sentence representations. In ICLR ."},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"crossref","unstructured":"Ryan Lowe Nissan Pow Iulian Serban and Joelle Pineau. 2015. The Ubuntu Dialogue Corpus: A Large Dataset for Research in Unstructured Multi-Turn Dialogue Systems. In SIGDIAL .  Ryan Lowe Nissan Pow Iulian Serban and Joelle Pineau. 2015. The Ubuntu Dialogue Corpus: A Large Dataset for Research in Unstructured Multi-Turn Dialogue Systems. In SIGDIAL .","DOI":"10.18653\/v1\/W15-4640"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"crossref","unstructured":"Aravindh Mahendran and Andrea Vedaldi. 2015. Understanding deep image representations by inverting them. In CVPR .  Aravindh Mahendran and Andrea Vedaldi. 2015. Understanding deep image representations by inverting them. In CVPR .","DOI":"10.1109\/CVPR.2015.7299155"},{"key":"e_1_3_2_2_42_1","unstructured":"Matt Mahoney. 2009. Large text compression benchmark. https:\/\/cs.fit.edu\/ mmahoney\/compression\/text.html  Matt Mahoney. 2009. Large text compression benchmark. https:\/\/cs.fit.edu\/ mmahoney\/compression\/text.html"},{"key":"e_1_3_2_2_43_1","unstructured":"Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017a. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS .  Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017a. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS ."},{"key":"e_1_3_2_2_44_1","unstructured":"H Brendan McMahan Daniel Ramage Kunal Talwar and Li Zhang. 2017b. Learning differentially private recurrent language models. In ICLR .  H Brendan McMahan Daniel Ramage Kunal Talwar and Li Zhang. 2017b. Learning differentially private recurrent language models. In ICLR ."},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"e_1_3_2_2_46_1","unstructured":"Tomas Mikolov Ilya Sutskever Kai Chen Greg S Corrado and Jeff Dean. 2013. Distributed representations of words and phrases and their compositionality. In NeurIPS .  Tomas Mikolov Ilya Sutskever Kai Chen Greg S Corrado and Jeff Dean. 2013. Distributed representations of words and phrases and their compositionality. In NeurIPS ."},{"key":"e_1_3_2_2_47_1","unstructured":"Daniel Moyer Shuyang Gao Rob Brekelmans Aram Galstyan and Greg Ver Steeg. 2018. Invariant representations without adversarial training. In NeurIPS .  Daniel Moyer Shuyang Gao Rob Brekelmans Aram Galstyan and Greg Ver Steeg. 2018. Invariant representations without adversarial training. In NeurIPS ."},{"key":"e_1_3_2_2_48_1","volume-title":"Comprehensive privacy analysis of deep learning: Stand-alone and federated learning under passive and active white-box inference attacks. arXiv preprint","author":"Nasr Milad","year":"2018"},{"key":"e_1_3_2_2_49_1","volume":"199","author":"Olshausen Bruno A","journal-title":"David J Field."},{"key":"e_1_3_2_2_50_1","volume-title":"Minos Katevas, Hamed Haddadi, and Hamid RR Rabiee.","author":"Osia Seyed Ali","year":"2018"},{"key":"e_1_3_2_2_51_1","volume-title":"Privacy Risks of General-Purpose Language Models. In 2020 IEEE Symposium on Security and Privacy (SP). IEEE, 1314--1331","author":"Pan Xudong","year":"2020"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"crossref","unstructured":"Bo Pang and Lillian Lee. 2004. A sentimental education: Sentiment analysis using subjectivity summarization based on minimum cuts. In ACL .  Bo Pang and Lillian Lee. 2004. A sentimental education: Sentiment analysis using subjectivity summarization based on minimum cuts. In ACL .","DOI":"10.3115\/1218955.1218990"},{"key":"e_1_3_2_2_53_1","unstructured":"Nicolas Papernot Steve Chien Shuang Song Abhradeep Thakurta and Ulfar Erlingsson. 2020. Making the Shoe Fit: Architectures Initializations and Tuning for Learning with Privacy. https:\/\/openreview.net\/forum?id=rJg851rYwH  Nicolas Papernot Steve Chien Shuang Song Abhradeep Thakurta and Ulfar Erlingsson. 2020. Making the Shoe Fit: Architectures Initializations and Tuning for Learning with Privacy. https:\/\/openreview.net\/forum?id=rJg851rYwH"},{"key":"e_1_3_2_2_54_1","volume-title":"Glove: Global vectors for word representation. In EMNLP .","author":"Pennington Jeffrey","year":"2014"},{"key":"e_1_3_2_2_55_1","volume-title":"Language models are unsupervised multitask learners. arXiv preprint","author":"Radford Alec","year":"2019"},{"key":"e_1_3_2_2_56_1","volume-title":"et almbox","author":"Rajkomar Alvin","year":"2018"},{"key":"e_1_3_2_2_57_1","unstructured":"Pranav Rajpurkar Jian Zhang Konstantin Lopyrev and Percy Liang. 2016. Squad: 100 000  Pranav Rajpurkar Jian Zhang Konstantin Lopyrev and Percy Liang. 2016. Squad: 100 000"},{"key":"e_1_3_2_2_58_1","volume-title":"arXiv preprint","year":"2016"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"crossref","unstructured":"Nils Reimers and Iryna Gurevych. 2019. Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks. In EMNLP .  Nils Reimers and Iryna Gurevych. 2019. Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks. In EMNLP .","DOI":"10.18653\/v1\/D19-1410"},{"key":"e_1_3_2_2_60_1","volume-title":"Character-level and multi-channel convolutional neural networks for large-scale authorship attribution. arXiv preprint","author":"Ruder Sebastian","year":"2016"},{"key":"e_1_3_2_2_61_1","unstructured":"Alexandre Sablayrolles Matthijs Douze Cordelia Schmid Yann Ollivier and Herve Jegou. 2019. White-box vs Black-box: Bayes Optimal Strategies for Membership Inference. In ICML .  Alexandre Sablayrolles Matthijs Douze Cordelia Schmid Yann Ollivier and Herve Jegou. 2019. White-box vs Black-box: Bayes Optimal Strategies for Membership Inference. In ICML ."},{"key":"e_1_3_2_2_62_1","volume-title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models. arXiv preprint","author":"Salem Ahmed","year":"2018"},{"key":"e_1_3_2_2_63_1","volume-title":"Genomic privacy and limits of individual detection in a pool. Nature genetics","author":"Sankararaman Sriram","year":"2009"},{"key":"e_1_3_2_2_64_1","unstructured":"Nikunj Saunshi Orestis Plevrakis Sanjeev Arora Mikhail Khodak and Hrishikesh Khandeparkar. 2019. A Theoretical Analysis of Contrastive Unsupervised Representation Learning. In ICML .  Nikunj Saunshi Orestis Plevrakis Sanjeev Arora Mikhail Khodak and Hrishikesh Khandeparkar. 2019. A Theoretical Analysis of Contrastive Unsupervised Representation Learning. In ICML ."},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"crossref","unstructured":"Allen Schmaltz Alexander M Rush and Stuart M Shieber. 2016. Word Ordering Without Syntax. In EMNLP .  Allen Schmaltz Alexander M Rush and Stuart M Shieber. 2016. Word Ordering Without Syntax. In EMNLP .","DOI":"10.18653\/v1\/D16-1255"},{"key":"e_1_3_2_2_66_1","unstructured":"Rakshith Shetty Bernt Schiele and Mario Fritz. 2018. A4NT: author attribute anonymity by adversarial training of neural machine translation. In USENIX Security .  Rakshith Shetty Bernt Schiele and Mario Fritz. 2018. A4NT: author attribute anonymity by adversarial training of neural machine translation. In USENIX Security ."},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"crossref","unstructured":"Congzheng Song and Vitaly Shmatikov. 2019 a. Auditing Data Provenance in Text-Generation Models. In KDD .  Congzheng Song and Vitaly Shmatikov. 2019 a. Auditing Data Provenance in Text-Generation Models. In KDD .","DOI":"10.1145\/3292500.3330885"},{"key":"e_1_3_2_2_69_1","volume-title":"2019 b. Overlearning Reveals Sensitive Attributes. arXiv preprint","author":"Song Congzheng","year":"2019"},{"key":"e_1_3_2_2_70_1","unstructured":"Dmitry Ulyanov Andrea Vedaldi and Victor Lempitsky. 2018. Deep image prior. In CVPR .  Dmitry Ulyanov Andrea Vedaldi and Victor Lempitsky. 2018. Deep image prior. In CVPR ."},{"key":"e_1_3_2_2_71_1","unstructured":"Ashish Vaswani Noam Shazeer Niki Parmar Jakob Uszkoreit Llion Jones Aidan N Gomez \u0141ukasz Kaiser and Illia Polosukhin. 2017. Attention is all you need. In NeurIPS .  Ashish Vaswani Noam Shazeer Niki Parmar Jakob Uszkoreit Llion Jones Aidan N Gomez \u0141ukasz Kaiser and Illia Polosukhin. 2017. Attention is all you need. In NeurIPS ."},{"key":"e_1_3_2_2_72_1","doi-asserted-by":"crossref","unstructured":"Ji Wang Jianguo Zhang Weidong Bao Xiaomin Zhu Bokai Cao and Philip S Yu. 2018. Not just privacy: Improving performance of private deep learning in mobile cloud. In KDD .  Ji Wang Jianguo Zhang Weidong Bao Xiaomin Zhu Bokai Cao and Philip S Yu. 2018. Not just privacy: Improving performance of private deep learning in mobile cloud. In KDD .","DOI":"10.1145\/3219819.3220106"},{"key":"e_1_3_2_2_73_1","unstructured":"Sean Welleck Zixin Yao Yu Gai Jialin Mao Zheng Zhang and Kyunghyun Cho. 2018. Loss functions for multiset prediction. In NeurIPS .  Sean Welleck Zixin Yao Yu Gai Jialin Mao Zheng Zhang and Kyunghyun Cho. 2018. Loss functions for multiset prediction. In NeurIPS ."},{"key":"e_1_3_2_2_74_1","volume-title":"Annotating expressions of opinions and emotions in language. Language resources and evaluation","author":"Wiebe Janyce","year":"2005"},{"key":"e_1_3_2_2_75_1","unstructured":"Qizhe Xie Zihang Dai Yulun Du Eduard Hovy and Graham Neubig. 2017. Controllable invariance through adversarial feature learning. In NeurIPS .  Qizhe Xie Zihang Dai Yulun Du Eduard Hovy and Graham Neubig. 2017. Controllable invariance through adversarial feature learning. In NeurIPS ."},{"key":"e_1_3_2_2_76_1","volume-title":"Learning semantic textual similarity from conversations. arXiv preprint","author":"Yang Yinfei","year":"2018"},{"key":"e_1_3_2_2_77_1","volume-title":"XLNet: Generalized Autoregressive Pretraining for Language Understanding. arXiv preprint","author":"Yang Zhilin","year":"2019"},{"key":"e_1_3_2_2_78_1","doi-asserted-by":"crossref","unstructured":"Samuel Yeom Irene Giacomelli Matt Fredrikson and Somesh Jha. 2018. Privacy risk in machine learning: Analyzing the connection to overfitting. In CSF .  Samuel Yeom Irene Giacomelli Matt Fredrikson and Somesh Jha. 2018. Privacy risk in machine learning: Analyzing the connection to overfitting. In CSF .","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_2_79_1","unstructured":"Chiyuan Zhang Samy Bengio Moritz Hardt Benjamin Recht and Oriol Vinyals. 2017. Understanding deep learning requires rethinking generalization. In ICLR .  Chiyuan Zhang Samy Bengio Moritz Hardt Benjamin Recht and Oriol Vinyals. 2017. Understanding deep learning requires rethinking generalization. In ICLR ."},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"crossref","unstructured":"Yukun Zhu Ryan Kiros Rich Zemel Ruslan Salakhutdinov Raquel Urtasun Antonio Torralba and Sanja Fidler. 2015. Aligning books and movies: Towards story-like visual explanations by watching movies and reading books. In ICCV .  Yukun Zhu Ryan Kiros Rich Zemel Ruslan Salakhutdinov Raquel Urtasun Antonio Torralba and Sanja Fidler. 2015. Aligning books and movies: Towards story-like visual explanations by watching movies and reading books. In ICCV .","DOI":"10.1109\/ICCV.2015.11"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417270","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417270","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:01:31Z","timestamp":1750183291000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417270"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":80,"alternative-id":["10.1145\/3372297.3417270","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3417270","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}