{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T16:59:07Z","timestamp":1777654747060,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,9,7]],"date-time":"2020-09-07T00:00:00Z","timestamp":1599436800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"the Hu-Xiang Youth Talent Program","award":["Grant No. 2018RS3041"],"award-info":[{"award-number":["Grant No. 2018RS3041"]}]},{"name":"the Hunan Natural Science Foundation for Distinguished Young Scholars","award":["Grant No. 2020JJ2010"],"award-info":[{"award-number":["Grant No. 2020JJ2010"]}]},{"name":"the National Key Laboratory of Science and Technology on Information System Security"},{"name":"the National Natural Science Foundation of China","award":["Grant No. 61874042 61704174 61532017"],"award-info":[{"award-number":["Grant No. 61874042 61704174 61532017"]}]},{"name":"the Key Research and Development Program of Hunan Province","award":["Grant No. 2019GK2082"],"award-info":[{"award-number":["Grant No. 2019GK2082"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,9,7]]},"DOI":"10.1145\/3386263.3407599","type":"proceedings-article","created":{"date-parts":[[2020,9,4]],"date-time":"2020-09-04T21:34:20Z","timestamp":1599255260000},"page":"531-536","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":25,"title":["Privacy Threats and Protection in Machine Learning"],"prefix":"10.1145","author":[{"given":"Jiliang","family":"Zhang","sequence":"first","affiliation":[{"name":"Peng Cheng Lab & Hunan University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chen","family":"Li","sequence":"additional","affiliation":[{"name":"Hunan University, Changsha, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Ye","sequence":"additional","affiliation":[{"name":"University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gang","family":"Qu","sequence":"additional","affiliation":[{"name":"University of Maryland, College Park, Maryland, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,9,7]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"crossref","unstructured":"Martin Abadi Andy Chu Ian Goodfellow H. Brendan McMahan Ilya Mironov Kunal Talwar and Li Zhang. 2016. Deep Learning with Differential Privacy. In 2016 CCS. 308--318.  Martin Abadi Andy Chu Ian Goodfellow H. Brendan McMahan Ilya Mironov Kunal Talwar and Li Zhang. 2016. Deep Learning with Differential Privacy. In 2016 CCS. 308--318.","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2015.071829"},{"key":"e_1_3_2_2_3_1","volume-title":"Security and Privacy Issues in Deep Learning. (jul","author":"Bae Ho","year":"2018","unstructured":"Ho Bae , Jaehee Jang , Dahuin Jung , Hyemi Jang , Heonseok Ha , and Sungroh Yoon . 2018. Security and Privacy Issues in Deep Learning. (jul 2018 ). arXiv:1807.11655 Ho Bae, Jaehee Jang, Dahuin Jung, Hyemi Jang, Heonseok Ha, and Sungroh Yoon. 2018. Security and Privacy Issues in Deep Learning. (jul 2018). arXiv:1807.11655"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-010-0346-z"},{"key":"e_1_3_2_2_5_1","first-page":"4","article-title":"Security Evaluation of Pattern Classifiers under Attack","volume":"26","author":"Biggio Battista","year":"2014","unstructured":"Battista Biggio , Giorgio Fumera , and Fabio Roli . 2014 . Security Evaluation of Pattern Classifiers under Attack . IEEE TKDE 26 , 4 (apr 2014), 984--996. Battista Biggio, Giorgio Fumera, and Fabio Roli. 2014. Security Evaluation of Pattern Classifiers under Attack. IEEE TKDE 26, 4 (apr 2014), 984--996.","journal-title":"IEEE TKDE"},{"key":"e_1_3_2_2_6_1","unstructured":"Nicholas Carlini Chang Liu \u00dalfar Erlingsson Jernej Kos and Dawn Song. 2019. The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks. In USENIX. 267--284.  Nicholas Carlini Chang Liu \u00dalfar Erlingsson Jernej Kos and Dawn Song. 2019. The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks. In USENIX. 267--284."},{"key":"e_1_3_2_2_7_1","unstructured":"Herve Chabanne Amaury de Wargny Jonathan Milgram Constance Morel and Emmanuel Prouff. 2017. Privacy-Preserving Classification on Deep Neural Network. IACR Cryptology ePrint Archive(2017).  Herve Chabanne Amaury de Wargny Jonathan Milgram Constance Morel and Emmanuel Prouff. 2017. Privacy-Preserving Classification on Deep Neural Network. IACR Cryptology ePrint Archive(2017)."},{"key":"e_1_3_2_2_8_1","volume-title":"Privacy Partitioning: Protecting User Data During the Deep Learning Inference Phase. (dec","author":"Chi Jianfeng","year":"2018","unstructured":"Jianfeng Chi , Emmanuel Owusu , Xuwang Yin , Tong Yu , William Chan , Patrick Tague , and Yuan Tian . 2018 . Privacy Partitioning: Protecting User Data During the Deep Learning Inference Phase. (dec 2018). arXiv:1812.02863 Jianfeng Chi, Emmanuel Owusu, Xuwang Yin, Tong Yu, William Chan, Patrick Tague, and Yuan Tian. 2018. Privacy Partitioning: Protecting User Data During the Deep Learning Inference Phase. (dec 2018). arXiv:1812.02863"},{"key":"e_1_3_2_2_9_1","unstructured":"Nathan Dowlin Ran Gilad-Bachrach Kim Laine Kristin Lauter Michael Naehrig and John Wernsing. 2016. CryptoNets: Applying Neural Networks to Encrypted Data with High Throughput and Accuracy. In ICML. 201--210.  Nathan Dowlin Ran Gilad-Bachrach Kim Laine Kristin Lauter Michael Naehrig and John Wernsing. 2016. CryptoNets: Applying Neural Networks to Encrypted Data with High Throughput and Accuracy. In ICML. 201--210."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"crossref","unstructured":"Cynthia Dwork Frank McSherry Kobbi Nissim and Adam Smith. 2006. Calibrating Noise to Sensitivity in Private Data Analysis. In 2006 TCC. 265--284.  Cynthia Dwork Frank McSherry Kobbi Nissim and Adam Smith. 2006. Calibrating Noise to Sensitivity in Private Data Analysis. In 2006 TCC. 265--284.","DOI":"10.1007\/11681878_14"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"crossref","unstructured":"Matt Fredrikson Somesh Jha and Thomas Ristenpart. 2015. Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures. In2015CCS. 1322--1333.  Matt Fredrikson Somesh Jha and Thomas Ristenpart. 2015. Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures. In2015CCS. 1322--1333.","DOI":"10.1145\/2810103.2813677"},{"key":"e_1_3_2_2_12_1","unstructured":"Matthew Fredrikson Eric Lantz Somesh Jha Simon Lin David Page and Thomas Ristenpart. 2014. Privacy in Pharmacogenetics: An End-to-End Case Study of Personalized Warfarin Dosing. In USENIX. 17--32.  Matthew Fredrikson Eric Lantz Somesh Jha Simon Lin David Page and Thomas Ristenpart. 2014. Privacy in Pharmacogenetics: An End-to-End Case Study of Personalized Warfarin Dosing. In USENIX. 17--32."},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"crossref","unstructured":"Karan Ganju Qi Wang Wei Yang Carl A Gunter and Nikita Borisov. 2018. Property Inference Attacks on Fully Connected Neural Networks using Permutation Invariant Representations. In 2018 CCS. 619--633.  Karan Ganju Qi Wang Wei Yang Carl A Gunter and Nikita Borisov. 2018. Property Inference Attacks on Fully Connected Neural Networks using Permutation Invariant Representations. In 2018 CCS. 619--633.","DOI":"10.1145\/3243734.3243834"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"crossref","unstructured":"Craig Gentry. 2009. Fully Homomorphic Encryption Using Ideal Lattices. In STOC. 169--178.  Craig Gentry. 2009. Fully Homomorphic Encryption Using Ideal Lattices. In STOC. 169--178.","DOI":"10.1145\/1536414.1536440"},{"key":"e_1_3_2_2_15_1","first-page":"1","article-title":"LOGAN: Membership Inference Attacks Against Generative Models","volume":"2019","author":"Hayes Jamie","year":"2019","unstructured":"Jamie Hayes , Luca Melis , George Danezis , and Emiliano De Cristofaro . 2019 . LOGAN: Membership Inference Attacks Against Generative Models . PoPETs 2019 , 1 (jan 2019), 133--152. Jamie Hayes, Luca Melis, George Danezis, and Emiliano De Cristofaro. 2019. LOGAN: Membership Inference Attacks Against Generative Models. PoPETs 2019, 1 (jan 2019), 133--152.","journal-title":"PoPETs"},{"key":"e_1_3_2_2_16_1","unstructured":"Jinyuan Jia and Neil Zhenqiang Gong. 2018. AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning. In USENIX. 513--529.  Jinyuan Jia and Neil Zhenqiang Gong. 2018. AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning. In USENIX. 513--529."},{"key":"e_1_3_2_2_17_1","unstructured":"Jinyuan Jia Ahmed Salem Michael Backes Yang Zhang and Neil Zhenqiang Gong. 2019. MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples. In 2019 CCS. 259--274.  Jinyuan Jia Ahmed Salem Michael Backes Yang Zhang and Neil Zhenqiang Gong. 2019. MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples. In 2019 CCS. 259--274."},{"key":"e_1_3_2_2_18_1","volume-title":"PRADA: Protecting Against DNN Model Stealing Attacks. In 2019 Euro S&P. 512--527.","author":"Juuti Mika","year":"2019","unstructured":"Mika Juuti , Sebastian Szyller , Samuel Marchal , and N Asokan . 2019 . PRADA: Protecting Against DNN Model Stealing Attacks. In 2019 Euro S&P. 512--527. Mika Juuti, Sebastian Szyller, Samuel Marchal, and N Asokan. 2019. PRADA: Protecting Against DNN Model Stealing Attacks. In 2019 Euro S&P. 512--527."},{"key":"e_1_3_2_2_19_1","first-page":"171","article-title":"Security Issues and Their Counter-measuring Techniques of Machine Learning : A Survey","volume":"12","author":"Li Pan","year":"2018","unstructured":"Pan Li , Wentao Zhao , Qiang Liu , Jianjing Cui , and Jianping Yin . 2018 . Security Issues and Their Counter-measuring Techniques of Machine Learning : A Survey . Journal of Frontiers of Computer Science and Technology 12 , 2 (2018), 171 -- 184 . Pan Li, Wentao Zhao, Qiang Liu, Jianjing Cui, and Jianping Yin. 2018. Security Issues and Their Counter-measuring Techniques of Machine Learning : A Survey. Journal of Frontiers of Computer Science and Technology 12, 2 (2018), 171--184.","journal-title":"Journal of Frontiers of Computer Science and Technology"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"crossref","unstructured":"Jian Liu Mika Juuti Yao Lu and N. Asokan. 2017. Oblivious Neural Network Predictions via MiniONN Transformations. In2017 CCS. 619--631.  Jian Liu Mika Juuti Yao Lu and N. Asokan. 2017. Oblivious Neural Network Predictions via MiniONN Transformations. In2017 CCS. 619--631.","DOI":"10.1145\/3133956.3134056"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3326285.3329073"},{"key":"e_1_3_2_2_22_1","volume-title":"Understanding Membership Inferences on Well-Generalized Learning Models. (feb","author":"Long Yunhui","year":"2018","unstructured":"Yunhui Long , Vincent Bindschaedler , Lei Wang , Diyue Bu , Xiaofeng Wang , Haixu Tang , Carl A Gunter , and Kai Chen . 2018. Understanding Membership Inferences on Well-Generalized Learning Models. (feb 2018 ). arXiv:1802.04889 Yunhui Long, Vincent Bindschaedler, Lei Wang, Diyue Bu, Xiaofeng Wang, Haixu Tang, Carl A Gunter, and Kai Chen. 2018. Understanding Membership Inferences on Well-Generalized Learning Models. (feb 2018). arXiv:1802.04889"},{"key":"e_1_3_2_2_23_1","unstructured":"H. Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS.  H. Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS."},{"key":"e_1_3_2_2_24_1","volume-title":"Emiliano De Cristofaro, and Vitaly Shmatikov","author":"Melis Luca","year":"2019","unstructured":"Luca Melis , Congzheng Song , Emiliano De Cristofaro, and Vitaly Shmatikov . 2019 . Exploiting Unintended Feature Leakage in Collaborative Learning. In 2019 S&P. 691--706. Luca Melis, Congzheng Song, Emiliano De Cristofaro, and Vitaly Shmatikov. 2019. Exploiting Unintended Feature Leakage in Collaborative Learning. In 2019 S&P. 691--706."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"crossref","unstructured":"Milad Nasr Reza Shokri and Amir Houmansadr. 2018. Machine Learning with Membership Privacy using Adversarial Regularization. In 2018 CCS. 634--646.  Milad Nasr Reza Shokri and Amir Houmansadr. 2018. Machine Learning with Membership Privacy using Adversarial Regularization. In 2018 CCS. 634--646.","DOI":"10.1145\/3243734.3243855"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"crossref","unstructured":"Milad Nasr Reza Shokri and Amir Houmansadr. 2019. Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning. In 2019 S&P. 739--753.  Milad Nasr Reza Shokri and Amir Houmansadr. 2019. Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning. In 2019 S&P. 739--753.","DOI":"10.1109\/SP.2019.00065"},{"key":"e_1_3_2_2_27_1","unstructured":"Seong Joon Oh Max Augustin Bernt Schiele and Mario Fritz. 2018. Towards Reverse-Engineering Black-Box Neural Networks. In ICLR.  Seong Joon Oh Max Augustin Bernt Schiele and Mario Fritz. 2018. Towards Reverse-Engineering Black-Box Neural Networks. In ICLR."},{"key":"e_1_3_2_2_28_1","volume-title":"Knockoff Nets: Stealing Functionality of Black-Box Models. In CVPR. 4954--4963.","author":"Orekondy Tribhuvanesh","year":"2019","unstructured":"Tribhuvanesh Orekondy , Bernt Schiele , and Mario Fritz . 2019 . Knockoff Nets: Stealing Functionality of Black-Box Models. In CVPR. 4954--4963. Tribhuvanesh Orekondy, Bernt Schiele, and Mario Fritz. 2019. Knockoff Nets: Stealing Functionality of Black-Box Models. In CVPR. 4954--4963."},{"key":"e_1_3_2_2_29_1","volume-title":"Prediction Poisoning: Utility-Constrained Defenses Against Model Stealing Attacks. (jun","author":"Orekondy Tribhuvanesh","year":"2019","unstructured":"Tribhuvanesh Orekondy , Bernt Schiele , and Mario Fritz . 2019 . Prediction Poisoning: Utility-Constrained Defenses Against Model Stealing Attacks. (jun 2019). arXiv:1906.10908 Tribhuvanesh Orekondy, Bernt Schiele, and Mario Fritz. 2019. Prediction Poisoning: Utility-Constrained Defenses Against Model Stealing Attacks. (jun 2019). arXiv:1906.10908"},{"key":"e_1_3_2_2_30_1","volume-title":"Sina Sajadmanesh, Ali Taheri, Kleomenis Katevas, Hamid R Rabiee, Nicholas D. Lane, and Hamed Haddadi.","author":"Osia Seyed Ali","year":"2020","unstructured":"Seyed Ali Osia , Ali Shahin Shamsabadi , Sina Sajadmanesh, Ali Taheri, Kleomenis Katevas, Hamid R Rabiee, Nicholas D. Lane, and Hamed Haddadi. 2020 . A Hybrid Deep Learning Architecture for Privacy-Preserving Mobile Analytics. IEEE Internet of Things Journal( mar 2020). Seyed Ali Osia, Ali Shahin Shamsabadi, Sina Sajadmanesh, Ali Taheri, Kleomenis Katevas, Hamid R Rabiee, Nicholas D. Lane, and Hamed Haddadi. 2020. A Hybrid Deep Learning Architecture for Privacy-Preserving Mobile Analytics. IEEE Internet of Things Journal(mar 2020)."},{"key":"e_1_3_2_2_31_1","unstructured":"Nicolas Papernot Mart\u00edn Abadi \u00dalfar Erlingsson Ian Goodfellow and Kunal Talwar. 2017. Semi-Supervised Knowledge Transfer for Deep Learning from Private Training Data. In ICLR.  Nicolas Papernot Mart\u00edn Abadi \u00dalfar Erlingsson Ian Goodfellow and Kunal Talwar. 2017. Semi-Supervised Knowledge Transfer for Deep Learning from Private Training Data. In ICLR."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"crossref","unstructured":"Nicolas Papernot Patrick McDaniel Ian Goodfellow Somesh Jha Z. Berkay Celik and Ananthram Swami. 2017. Practical Black-Box Attacks against Machine Learning. In 2017 AsiaCCS. 506--519.  Nicolas Papernot Patrick McDaniel Ian Goodfellow Somesh Jha Z. Berkay Celik and Ananthram Swami. 2017. Practical Black-Box Attacks against Machine Learning. In 2017 AsiaCCS. 506--519.","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"crossref","unstructured":"NhatHai Phan Yue Wang Xintao Wu and Dejing Dou. 2016. Differential Privacy Preservation for Deep Auto-Encoders: An Application of Human Behavior Prediction. In 2016 AAAI.  NhatHai Phan Yue Wang Xintao Wu and Dejing Dou. 2016. Differential Privacy Preservation for Deep Auto-Encoders: An Application of Human Behavior Prediction. In 2016 AAAI.","DOI":"10.1609\/aaai.v30i1.10165"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"crossref","unstructured":"Nhat Hai Phan Xintao Wu Han Hu and Dejing Dou. 2017. Adaptive Laplace Mechanism: Differential Privacy Preservation in Deep Learning. In 2017 ICDM. 385--394.  Nhat Hai Phan Xintao Wu Han Hu and Dejing Dou. 2017. Adaptive Laplace Mechanism: Differential Privacy Preservation in Deep Learning. In 2017 ICDM. 385--394.","DOI":"10.1109\/ICDM.2017.48"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"crossref","unstructured":"Apostolos Pyrgelis Carmela Troncoso and Emiliano De Cristofaro. 2018. Knock Knock Who's There? Membership Inference on Aggregate Location Data. In 2018 NDSS.  Apostolos Pyrgelis Carmela Troncoso and Emiliano De Cristofaro. 2018. Knock Knock Who's There? Membership Inference on Aggregate Location Data. In 2018 NDSS.","DOI":"10.14722\/ndss.2018.23183"},{"key":"e_1_3_2_2_36_1","volume-title":"Dertouzos","author":"Rivest Ronald L.","year":"1978","unstructured":"Ronald L. Rivest , Len Adleman , and Michael L . Dertouzos . 1978 . On data banks and privacy homomorphisms. Foundations of secure computation4, 11 (1978),169--180. Ronald L. Rivest, Len Adleman, and Michael L. Dertouzos. 1978. On data banks and privacy homomorphisms. Foundations of secure computation4, 11 (1978),169--180."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"crossref","unstructured":"Ahmed Salem Yang Zhang Mathias Humbert Pascal Berrang Mario Fritz and Michael Backes. 2019. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In 2019 NDSS.  Ahmed Salem Yang Zhang Mathias Humbert Pascal Berrang Mario Fritz and Michael Backes. 2019. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In 2019 NDSS.","DOI":"10.14722\/ndss.2019.23119"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"crossref","unstructured":"Reza Shokri and Vitaly Shmatikov. 2015. Privacy-Preserving Deep Learning. In 2015 CCS. 1310--1321.  Reza Shokri and Vitaly Shmatikov. 2015. Privacy-Preserving Deep Learning. In 2015 CCS. 1310--1321.","DOI":"10.1109\/ALLERTON.2015.7447103"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"crossref","unstructured":"Reza Shokri Marco Stronati Congzheng Song and Vitaly Shmatikov. 2017. Membership Inference Attacks Against Machine Learning Models. In 2017 S&P. 3--18.  Reza Shokri Marco Stronati Congzheng Song and Vitaly Shmatikov. 2017. Membership Inference Attacks Against Machine Learning Models. In 2017 S&P. 3--18.","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"crossref","unstructured":"Congzheng Song Thomas Ristenpart and Vitaly Shmatikov. 2017. Machine Learning Models that Remember Too Much. In 2017 CCS. 587--601.  Congzheng Song Thomas Ristenpart and Vitaly Shmatikov. 2017. Machine Learning Models that Remember Too Much. In 2017 CCS. 587--601.","DOI":"10.1145\/3133956.3134077"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"crossref","unstructured":"Liwei Song Reza Shokri and Prateek Mittal. 2019. Privacy Risks of Securing Machine Learning Models against Adversarial Examples. In2019 CCS. 241--257.  Liwei Song Reza Shokri and Prateek Mittal. 2019. Privacy Risks of Securing Machine Learning Models against Adversarial Examples. In2019 CCS. 241--257.","DOI":"10.1145\/3319535.3354211"},{"key":"e_1_3_2_2_42_1","unstructured":"Florian Tram\u00e8r Fan Zhang Ari Juels Michael K. Reiter and Thomas Ristenpart. 2016. Stealing Machine Learning Models via Prediction APIs. In USENIX. 601--618.  Florian Tram\u00e8r Fan Zhang Ari Juels Michael K. Reiter and Thomas Ristenpart. 2016. Stealing Machine Learning Models via Prediction APIs. In USENIX. 601--618."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"crossref","unstructured":"Binghui Wang and Neil Zhenqiang Gong. 2018. Stealing Hyper parameters in Machine Learning. In 2018 S&P. 36--52.  Binghui Wang and Neil Zhenqiang Gong. 2018. Stealing Hyper parameters in Machine Learning. In 2018 S&P. 36--52.","DOI":"10.1109\/SP.2018.00038"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"crossref","unstructured":"Udi Weinsberg Smriti Bhagat Stratis Ioannidis and Nina Taft. 2012. BlurMe: inferring and obfuscating user gender based on ratings. In RecSys. 195--202.  Udi Weinsberg Smriti Bhagat Stratis Ioannidis and Nina Taft. 2012. BlurMe: inferring and obfuscating user gender based on ratings. In RecSys. 195--202.","DOI":"10.1145\/2365952.2365989"},{"key":"e_1_3_2_2_45_1","unstructured":"Mike Wheatley. 2018. Google's Duplex AI wows audience at I\/O (and worries others) with human like phone conversations. https:\/\/siliconangle.com\/2018\/05\/08\/googles-duplex-ai-wows-audience-io-humanlike-phone-conversations\/  Mike Wheatley. 2018. Google's Duplex AI wows audience at I\/O (and worries others) with human like phone conversations. https:\/\/siliconangle.com\/2018\/05\/08\/googles-duplex-ai-wows-audience-io-humanlike-phone-conversations\/"},{"key":"e_1_3_2_2_46_1","unstructured":"Wikipedia. 2018. General Data Protection Regulation. https:\/\/en.wikipedia.org\/wiki\/General_Data_Protection_Regulation  Wikipedia. 2018. General Data Protection Regulation. https:\/\/en.wikipedia.org\/wiki\/General_Data_Protection_Regulation"},{"key":"e_1_3_2_2_47_1","unstructured":"Wikipedia. 2019. Facebook-Cambridge Analytic a data scandal. https:\/\/en.wikipedia.org\/wiki\/Facebook-Cambridge_Analytica_data_scandal  Wikipedia. 2019. Facebook-Cambridge Analytic a data scandal. https:\/\/en.wikipedia.org\/wiki\/Facebook-Cambridge_Analytica_data_scandal"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"crossref","unstructured":"Ziqi Yang Jiyi Zhang Ee-Chien Chang and Zhenkai Liang. 2019. Neural Network Inversion in Adversarial Setting via Background Knowledge Alignment. In 2019 CCS. 225--240.  Ziqi Yang Jiyi Zhang Ee-Chien Chang and Zhenkai Liang. 2019. Neural Network Inversion in Adversarial Setting via Background Knowledge Alignment. In 2019 CCS. 225--240.","DOI":"10.1145\/3319535.3354261"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"crossref","unstructured":"Samuel Yeom Irene Giacomelli Matt Fredrikson and Somesh Jha. 2018. Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting. In2018 IEEE CSF. 268--282.  Samuel Yeom Irene Giacomelli Matt Fredrikson and Somesh Jha. 2018. Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting. In2018 IEEE CSF. 268--282.","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_2_50_1","volume-title":"Adversarial Examples: Opportunities and Challenges","author":"Zhang Jiliang","year":"2019","unstructured":"Jiliang Zhang and Chen Li . 2019 . Adversarial Examples: Opportunities and Challenges . IEEE TNNLS( 2019). Jiliang Zhang and Chen Li. 2019. Adversarial Examples: Opportunities and Challenges.IEEE TNNLS(2019)."},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2015.2470255"},{"key":"e_1_3_2_2_52_1","article-title":"A Survey of Privacy Preserving in Machine Learning","volume":"4","author":"Zhao Zhendong","year":"2019","unstructured":"Zhendong Zhao , Xiaolin Chang , and Yixiang Wang . 2019 . A Survey of Privacy Preserving in Machine Learning . Journal of Cyber Security 4 , 5 (2019). Zhendong Zhao, Xiaolin Chang, and Yixiang Wang. 2019. A Survey of Privacy Preserving in Machine Learning. Journal of Cyber Security 4, 5 (2019).","journal-title":"Journal of Cyber Security"}],"event":{"name":"GLSVLSI '20: Great Lakes Symposium on VLSI 2020","location":"Virtual Event China","acronym":"GLSVLSI '20"},"container-title":["Proceedings of the 2020 on Great Lakes Symposium on VLSI"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3386263.3407599","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3386263.3407599","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:38:25Z","timestamp":1750199905000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3386263.3407599"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,9,7]]},"references-count":52,"alternative-id":["10.1145\/3386263.3407599","10.1145\/3386263"],"URL":"https:\/\/doi.org\/10.1145\/3386263.3407599","relation":{},"subject":[],"published":{"date-parts":[[2020,9,7]]},"assertion":[{"value":"2020-09-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}