{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,28]],"date-time":"2026-08-28T14:50:24Z","timestamp":1787928624261,"version":"build-2784847793"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,4,30]],"date-time":"2023-04-30T00:00:00Z","timestamp":1682812800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSFC","award":["U20B2049 and U21B2018"],"award-info":[{"award-number":["U20B2049 and U21B2018"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972296"],"award-info":[{"award-number":["61972296"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key R&D Program of China","award":["2020AAA0107701"],"award-info":[{"award-number":["2020AAA0107701"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,4,30]]},"DOI":"10.1145\/3543507.3583224","type":"proceedings-article","created":{"date-parts":[[2023,4,26]],"date-time":"2023-04-26T23:30:51Z","timestamp":1682551851000},"page":"2045-2053","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["NetGuard: Protecting Commercial Web APIs from Model Inversion Attacks using GAN-generated Fake Samples"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2190-8117","authenticated-orcid":false,"given":"Xueluan","family":"Gong","sequence":"first","affiliation":[{"name":"Wuhan University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1394-9587","authenticated-orcid":false,"given":"Ziyao","family":"Wang","sequence":"additional","affiliation":[{"name":"Wuhan University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1382-0679","authenticated-orcid":false,"given":"Yanjiao","family":"Chen","sequence":"additional","affiliation":[{"name":"Zhejiang University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8967-8525","authenticated-orcid":false,"given":"Qian","family":"Wang","sequence":"additional","affiliation":[{"name":"Wuhan University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0547-315X","authenticated-orcid":false,"given":"Cong","family":"Wang","sequence":"additional","affiliation":[{"name":"City University of Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6959-0569","authenticated-orcid":false,"given":"Chao","family":"Shen","sequence":"additional","affiliation":[{"name":"Xi'an Jiaotong University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,4,30]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_1_2_1","volume-title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion. arXiv preprint arXiv:1909.11835","author":"A\u00efvodji Ulrich","year":"2019","unstructured":"Ulrich A\u00efvodji, S\u00e9bastien Gambs, and Timon Ther. 2019. GAMIN: An Adversarial Approach to Black-Box Model Inversion. arXiv preprint arXiv:1909.11835 (2019)."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3299874.3319457"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24335"},{"key":"e_1_3_2_1_5_1","volume-title":"End to end learning for self-driving cars. arXiv preprint arXiv:1604.07316","author":"Bojarski Mariusz","year":"2016","unstructured":"Mariusz Bojarski, Davide Del\u00a0Testa, Daniel Dworakowski, Bernhard Firner, Beat Flepp, Prasoon Goyal, Lawrence\u00a0D Jackel, Mathew Monfort, Urs Muller, Jiakai Zhang, 2016. End to end learning for self-driving cars. arXiv preprint arXiv:1604.07316 (2016)."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2018.00020"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_15"},{"key":"e_1_3_2_1_8_1","volume-title":"Knowledge-Enriched Distributional Model Inversion Attacks. In IEEE\/CVF International Conference on Computer Vision. 16178\u201316187","author":"Chen Si","year":"2021","unstructured":"Si Chen, Mostafa Kahla, Ruoxi Jia, and Guo-Jun Qi. 2021. Knowledge-Enriched Distributional Model Inversion Attacks. In IEEE\/CVF International Conference on Computer Vision. 16178\u201316187."},{"key":"e_1_3_2_1_9_1","first-page":"3366","article-title":"A continual learning survey: Defying forgetting in classification tasks","volume":"44","author":"De\u00a0Lange Matthias","year":"2021","unstructured":"Matthias De\u00a0Lange, Rahaf Aljundi, Marc Masana, Sarah Parisot, Xu Jia, Ale\u0161 Leonardis, Gregory Slabaugh, and Tinne Tuytelaars. 2021. A continual learning survey: Defying forgetting in classification tasks. IEEE Transactions on Pattern Analysis and Machine Intelligence 44, 7 (2021), 3366\u20133385.","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"e_1_3_2_1_10_1","unstructured":"Predictive Analytics-Cloud Machine\u00a0Learning Engine. [n. d.]. Google Cloud. Google [Online]. Available: https:\/\/cloud. google. com\/appengine\/. ([n. d.])."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"e_1_3_2_1_12_1","volume-title":"USENIX Security Symposium. USENIX Association, 17\u201332","author":"Fredrikson Matthew","year":"2014","unstructured":"Matthew Fredrikson, Eric Lantz, Somesh Jha, Simon Lin, David Page, and Thomas Ristenpart. 2014. Privacy in pharmacogenetics: An end-to-end case study of personalized warfarin dosing. In USENIX Security Symposium. USENIX Association, 17\u201332."},{"key":"e_1_3_2_1_13_1","volume-title":"USENIX Security Symposium. 979\u2013995","author":"Gong Neil\u00a0Zhenqiang","year":"2016","unstructured":"Neil\u00a0Zhenqiang Gong and Bin Liu. 2016. You are who you know and how you behave: Attribute inference attacks via users\u2019 social friends and behaviors. In USENIX Security Symposium. 979\u2013995."},{"key":"e_1_3_2_1_14_1","volume-title":"Private data inference attacks against cloud: Model, technologies, and research directions","author":"Gong Xueluan","year":"2022","unstructured":"Xueluan Gong, Yanjiao Chen, Qian Wang, Wang Meng, and Shuyang Li. 2022. Private data inference attacks against cloud: Model, technologies, and research directions. IEEE Communications Magazine (2022)."},{"key":"e_1_3_2_1_15_1","volume-title":"Private Data Inference Attacks against Cloud: Model, Technologies, and Research Directions","author":"Gong Xueluan","year":"2022","unstructured":"Xueluan Gong, Yanjiao Chen, Qian Wang, Meng Wang, and Shuyang Li. 2022. Private Data Inference Attacks against Cloud: Model, Technologies, and Research Directions. IEEE Communications Magazine (2022)."},{"key":"e_1_3_2_1_16_1","unstructured":"Ian Goodfellow Jean Pouget-Abadie Mehdi Mirza Bing Xu David Warde-Farley Sherjil Ozair Aaron Courville and Yoshua Bengio. 2014. Generative adversarial nets. In Advances in Neural Information Processing Systems. 2672\u20132680."},{"key":"e_1_3_2_1_17_1","volume-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium. Advances in neural information processing systems 30","author":"Heusel Martin","year":"2017","unstructured":"Martin Heusel, Hubert Ramsauer, Thomas Unterthiner, Bernhard Nessler, and Sepp Hochreiter. 2017. Gans trained by a two time-scale update rule converge to a local nash equilibrium. Advances in neural information processing systems 30 (2017)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Brady Houston and Katrin Kirchhoff. 2020. Continual learning for multi-dialect acoustic models.. In Interspeech. 576\u2013580.","DOI":"10.21437\/Interspeech.2020-1797"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00453"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1611835114"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"e_1_3_2_1_22_1","volume-title":"Exploiting Unintended Feature Leakage in Collaborative Learning. In IEEE Symposium on Security and Privacy. 691\u2013706","author":"Melis L.","unstructured":"L. Melis, C. Song, E. De Cristofaro, and V. Shmatikov. 2019. Exploiting Unintended Feature Leakage in Collaborative Learning. In IEEE Symposium on Security and Privacy. 691\u2013706."},{"key":"e_1_3_2_1_23_1","volume-title":"Practical Recommendations for Replay-based Continual Learning Methods. arXiv preprint arXiv:2203.10317","author":"Merlin Gabriele","year":"2022","unstructured":"Gabriele Merlin, Vincenzo Lomonaco, Andrea Cossu, Antonio Carta, and Davide Bacciu. 2022. Practical Recommendations for Replay-based Continual Learning Methods. arXiv preprint arXiv:2203.10317 (2022)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5244\/C.29.41"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.91"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00049"},{"key":"e_1_3_2_1_27_1","volume-title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Annual Network and Distributed System Security Symposium. The Internet Society.","author":"Salem Ahmed","year":"2019","unstructured":"Ahmed Salem, Yang Zhang, Mathias Humbert, Pascal Berrang, Mario Fritz, and Michael Backes. 2019. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Annual Network and Distributed System Security Symposium. The Internet Society."},{"key":"e_1_3_2_1_28_1","volume-title":"Three scenarios for continual learning. arXiv preprint arXiv:1904.07734","author":"Van\u00a0de Ven M","year":"2019","unstructured":"Gido\u00a0M Van\u00a0de Ven and Andreas\u00a0S Tolias. 2019. Three scenarios for continual learning. arXiv preprint arXiv:1904.07734 (2019)."},{"key":"e_1_3_2_1_29_1","volume-title":"evolve: A high-performance face recognition library. arXiv preprint arXiv:2107.08621","author":"Wang Qingzhong","year":"2021","unstructured":"Qingzhong Wang, Pengfei Zhang, Haoyi Xiong, and Jian Zhao. 2021. Face. evolve: A high-performance face recognition library. arXiv preprint arXiv:2107.08621 (2021)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17387"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17387"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSR51186.2021.9527945"},{"key":"e_1_3_2_1_33_1","volume-title":"Defending Model Inversion and Membership Inference Attacks via Prediction Purification. arXiv preprint arXiv:2005.03915","author":"Yang Ziqi","year":"2020","unstructured":"Ziqi Yang, Bin Shao, Bohan Xuan, Ee-Chien Chang, and Fan Zhang. 2020. Defending Model Inversion and Membership Inference Attacks via Prediction Purification. arXiv preprint arXiv:2005.03915 (2020)."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354261"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00874"},{"key":"e_1_3_2_1_37_1","volume-title":"Opacus: User-friendly differential privacy library in PyTorch. arXiv preprint arXiv:2109.12298","author":"Yousefpour Ashkan","year":"2021","unstructured":"Ashkan Yousefpour, Igor Shilov, Alexandre Sablayrolles, Davide Testuggine, Karthik Prasad, Mani Malek, John Nguyen, Sayan Ghosh, Akash Bharadwaj, Jessica Zhao, 2021. Opacus: User-friendly differential privacy library in PyTorch. arXiv preprint arXiv:2109.12298 (2021)."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00033"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00072"}],"event":{"name":"WWW '23: The ACM Web Conference 2023","location":"Austin TX USA","acronym":"WWW '23","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2023"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3543507.3583224","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3543507.3583224","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:09:18Z","timestamp":1750183758000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3543507.3583224"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,30]]},"references-count":39,"alternative-id":["10.1145\/3543507.3583224","10.1145\/3543507"],"URL":"https:\/\/doi.org\/10.1145\/3543507.3583224","relation":{},"subject":[],"published":{"date-parts":[[2023,4,30]]},"assertion":[{"value":"2023-04-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}