{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T16:04:34Z","timestamp":1781280274004,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":71,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001381","name":"National Research Foundation Singapore","doi-asserted-by":"publisher","award":["NRF-NRFFAI1-2019-0004"],"award-info":[{"award-number":["NRF-NRFFAI1-2019-0004"]}],"id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Ministry of Education Singapore","award":["MOE-T2EP20121-0011"],"award-info":[{"award-number":["MOE-T2EP20121-0011"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3548606.3560694","type":"proceedings-article","created":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T11:41:28Z","timestamp":1667821288000},"page":"249-262","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["Membership Inference Attacks and Generalization"],"prefix":"10.1145","author":[{"given":"Teodora","family":"Baluta","sequence":"first","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shiqi","family":"Shen","sequence":"additional","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"S.","family":"Hitarth","sequence":"additional","affiliation":[{"name":"Hong Kong University of Science and Technology & National University of Singapore, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shruti","family":"Tople","sequence":"additional","affiliation":[{"name":"Microsoft Research, Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Prateek","family":"Saxena","sequence":"additional","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Membership Inference Attacks and Generalization: A Causal Perspective. arXiv preprint arXiv:2209.08615","author":"Baluta Teodora","year":"2022","unstructured":"Teodora Baluta , Shiqi Shen , S Hitarth , Shruti Tople , and Prateek Saxena . 2022. Membership Inference Attacks and Generalization: A Causal Perspective. arXiv preprint arXiv:2209.08615 ( 2022 ). Teodora Baluta, Shiqi Shen, S Hitarth, Shruti Tople, and Prateek Saxena. 2022. Membership Inference Attacks and Generalization: A Causal Perspective. arXiv preprint arXiv:2209.08615 (2022)."},{"key":"e_1_3_2_1_2_1","unstructured":"Elias Bareinboim and Judea Pearl. 2012. Controlling selection bias in causal inference. In Artificial Intelligence and Statistics. PMLR 100--108.  Elias Bareinboim and Judea Pearl. 2012. Controlling selection bias in causal inference. In Artificial Intelligence and Statistics. PMLR 100--108."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.2307\/3002000"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Henry E Brady. 2008. Causation and explanation in social science. na.  Henry E Brady. 2008. Causation and explanation in social science. na.","DOI":"10.1093\/oxfordhb\/9780199286546.003.0010"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/3023476.3023484"},{"key":"e_1_3_2_1_6_1","volume-title":"USENIX Security Symposium. 267--284","author":"Carlini Nicholas","year":"2019","unstructured":"Nicholas Carlini , Chang Liu , \u00dalfar Erlingsson , Jernej Kos , and Dawn Song . 2019 . The secret sharer: Evaluating and testing unintended memorization in neural networks . In USENIX Security Symposium. 267--284 . Nicholas Carlini, Chang Liu, \u00dalfar Erlingsson, Jernej Kos, and Dawn Song. 2019. The secret sharer: Evaluating and testing unintended memorization in neural networks. In USENIX Security Symposium. 267--284."},{"key":"e_1_3_2_1_7_1","unstructured":"Nicholas Carlini Florian Tramer Eric Wallace Matthew Jagielski Ariel Herbert-Voss Katherine Lee Adam Roberts Tom Brown Dawn Song Ulfar Erlingsson etal 2020. Extracting training data from large language models. arXiv preprint arXiv:2012.07805 (2020).  Nicholas Carlini Florian Tramer Eric Wallace Matthew Jagielski Ariel Herbert-Voss Katherine Lee Adam Roberts Tom Brown Dawn Song Ulfar Erlingsson et al. 2020. Extracting training data from large language models. arXiv preprint arXiv:2012.07805 (2020)."},{"key":"e_1_3_2_1_8_1","volume-title":"proceedings of fifth conference on artificial intelligence and statistics. 112--128","author":"Chickering David","year":"1995","unstructured":"David Chickering , Dan Geiger , and David Heckerman . 1995 . Learning Bayesian networks: Search methods and experimental results . In proceedings of fifth conference on artificial intelligence and statistics. 112--128 . David Chickering, Dan Geiger, and David Heckerman. 1995. Learning Bayesian networks: Search methods and experimental results. In proceedings of fifth conference on artificial intelligence and statistics. 112--128."},{"key":"e_1_3_2_1_9_1","volume-title":"International Conference on Machine Learning (ICML). PMLR","author":"Choquette-Choo Christopher A","year":"2021","unstructured":"Christopher A Choquette-Choo , Florian Tramer , Nicholas Carlini , and Nicolas Papernot . 2021 . Label-only membership inference attacks . In International Conference on Machine Learning (ICML). PMLR , 1964--1974. Christopher A Choquette-Choo, Florian Tramer, Nicholas Carlini, and Nicolas Papernot. 2021. Label-only membership inference attacks. In International Conference on Machine Learning (ICML). PMLR, 1964--1974."},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 2007 UK Workshop on Computational Intelligence. Citeseer.","author":"Daly R\u00f3n\u00e1n","year":"2007","unstructured":"R\u00f3n\u00e1n Daly and Qiang Shen . 2007 . Methods to accelerate the learning of bayesian network structures . In Proceedings of the 2007 UK Workshop on Computational Intelligence. Citeseer. R\u00f3n\u00e1n Daly and Qiang Shen. 2007. Methods to accelerate the learning of bayesian network structures. In Proceedings of the 2007 UK Workshop on Computational Intelligence. Citeseer."},{"key":"e_1_3_2_1_11_1","volume-title":"Advances in Neural Information Processing Systems (NeurIPS)","volume":"33","author":"Dziugaite Gintare Karolina","year":"2020","unstructured":"Gintare Karolina Dziugaite , Alexandre Drouin , Brady Neal , Nitarshan Rajkumar , Ethan Caballero , Linbo Wang , Ioannis Mitliagkas , and Daniel M Roy . 2020 . In search of robust measures of generalization . Advances in Neural Information Processing Systems (NeurIPS) , Vol. 33 (2020). Gintare Karolina Dziugaite, Alexandre Drouin, Brady Neal, Nitarshan Rajkumar, Ethan Caballero, Linbo Wang, Ioannis Mitliagkas, and Daniel M Roy. 2020. In search of robust measures of generalization. Advances in Neural Information Processing Systems (NeurIPS) , Vol. 33 (2020)."},{"key":"e_1_3_2_1_12_1","volume-title":"Data analysis with Bayesian networks: A bootstrap approach. arXiv preprint arXiv:1301.6695","author":"Friedman Nir","year":"2013","unstructured":"Nir Friedman , Moises Goldszmidt , and Abraham Wyner . 2013. Data analysis with Bayesian networks: A bootstrap approach. arXiv preprint arXiv:1301.6695 ( 2013 ). Nir Friedman, Moises Goldszmidt, and Abraham Wyner. 2013. Data analysis with Bayesian networks: A bootstrap approach. arXiv preprint arXiv:1301.6695 (2013)."},{"key":"e_1_3_2_1_13_1","volume-title":"Being Bayesian about network structure. A Bayesian approach to structure discovery in Bayesian networks. Machine learning","author":"Friedman Nir","year":"2003","unstructured":"Nir Friedman and Daphne Koller . 2003. Being Bayesian about network structure. A Bayesian approach to structure discovery in Bayesian networks. Machine learning , Vol. 50 , 1 ( 2003 ), 95--125. Nir Friedman and Daphne Koller. 2003. Being Bayesian about network structure. A Bayesian approach to structure discovery in Bayesian networks. Machine learning, Vol. 50, 1 (2003), 95--125."},{"key":"e_1_3_2_1_14_1","volume-title":"Neural networks and the bias\/variance dilemma. Neural computation","author":"Geman Stuart","year":"1992","unstructured":"Stuart Geman , Elie Bienenstock , and Ren\u00e9 Doursat . 1992. Neural networks and the bias\/variance dilemma. Neural computation , Vol. 4 , 1 ( 1992 ), 1--58. Stuart Geman, Elie Bienenstock, and Ren\u00e9 Doursat. 1992. Neural networks and the bias\/variance dilemma. Neural computation, Vol. 4, 1 (1992), 1--58."},{"key":"e_1_3_2_1_15_1","volume-title":"Review of causal discovery methods based on graphical models. Frontiers in genetics","author":"Glymour Clark","year":"2019","unstructured":"Clark Glymour , Kun Zhang , and Peter Spirtes . 2019. Review of causal discovery methods based on graphical models. Frontiers in genetics , Vol. 10 ( 2019 ), 524. Clark Glymour, Kun Zhang, and Peter Spirtes. 2019. Review of causal discovery methods based on graphical models. Frontiers in genetics , Vol. 10 (2019), 524."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0008"},{"key":"e_1_3_2_1_17_1","volume-title":"Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429","author":"He Xinlei","year":"2021","unstructured":"Xinlei He , Rui Wen , Yixin Wu , Michael Backes , Yun Shen , and Yang Zhang . 2021. Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429 ( 2021 ). Xinlei He, Rui Wen, Yixin Wu, Michael Backes, Yun Shen, and Yang Zhang. 2021. Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429 (2021)."},{"key":"e_1_3_2_1_18_1","volume-title":"International statistical review","author":"Heckman James J","year":"2008","unstructured":"James J Heckman . 2008. Econometric causality . International statistical review , Vol. 76 , 1 ( 2008 ), 1--27. James J Heckman. 2008. Econometric causality. International statistical review , Vol. 76, 1 (2008), 1--27."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/3020419.3020446"},{"key":"e_1_3_2_1_20_1","volume-title":"Neil Zhenqiang Gong, and Yinzhi Cao","author":"Hui Bo","year":"2021","unstructured":"Bo Hui , Yuchen Yang , Haolin Yuan , Philippe Burlina , Neil Zhenqiang Gong, and Yinzhi Cao . 2021 . Practical Blind Membership Inference Attack via Differential Comparisons. Network and Distributed Systems Security (NDSS) ( 2021). Bo Hui, Yuchen Yang, Haolin Yuan, Philippe Burlina, Neil Zhenqiang Gong, and Yinzhi Cao. 2021. Practical Blind Membership Inference Attack via Differential Comparisons. Network and Distributed Systems Security (NDSS) (2021)."},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 34th Conference on Uncertainty in Artificial Intelligence (UAI).","author":"Jaber Amin","year":"2018","unstructured":"Amin Jaber , Jiji Zhang , and Elias Bareinboim . 2018 . Causal Identification under Markov Equivalence . In Proceedings of the 34th Conference on Uncertainty in Artificial Intelligence (UAI). Amin Jaber, Jiji Zhang, and Elias Bareinboim. 2018. Causal Identification under Markov Equivalence. In Proceedings of the 34th Conference on Uncertainty in Artificial Intelligence (UAI)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363201"},{"key":"e_1_3_2_1_23_1","volume-title":"Predicting the Generalization Gap in Deep Networks with Margin Distributions. In International Conference on Learning Representations (ICLR).","author":"Jiang Yiding","year":"2019","unstructured":"Yiding Jiang , Dilip Krishnan , Hossein Mobahi , and Samy Bengio . 2019 . Predicting the Generalization Gap in Deep Networks with Margin Distributions. In International Conference on Learning Representations (ICLR). Yiding Jiang, Dilip Krishnan, Hossein Mobahi, and Samy Bengio. 2019. Predicting the Generalization Gap in Deep Networks with Margin Distributions. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_24_1","unstructured":"Murat Kocaoglu Amin Jaber Karthikeyan Shanmugam and Elias Bareinboim. 2019. Characterization and Learning of Causal Graphs with Latent Variables from Soft Interventions.. In Advances in Neural Information Processing Systems (NeurIPS).  Murat Kocaoglu Amin Jaber Karthikeyan Shanmugam and Elias Bareinboim. 2019. Characterization and Learning of Causal Graphs with Latent Variables from Soft Interventions.. In Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_25_1","first-page":"275","article-title":"Bias plus variance decomposition for zero-one loss functions","volume":"96","author":"Kohavi Ron","year":"1996","unstructured":"Ron Kohavi , David H Wolpert , 1996 . Bias plus variance decomposition for zero-one loss functions . In ICML , Vol. 96. 275 -- 283 . Ron Kohavi, David H Wolpert, et al. 1996. Bias plus variance decomposition for zero-one loss functions. In ICML, Vol. 96. 275--83.","journal-title":"ICML"},{"key":"e_1_3_2_1_26_1","volume-title":"Advances in Neural Information Processing Systems (NeurIPS)","volume":"34","author":"Lee Sanghack","year":"2021","unstructured":"Sanghack Lee and Elias Bareinboim . 2021 . Causal identification with matrix equations . Advances in Neural Information Processing Systems (NeurIPS) , Vol. 34 (2021). Sanghack Lee and Elias Bareinboim. 2021. Causal identification with matrix equations. Advances in Neural Information Processing Systems (NeurIPS) , Vol. 34 (2021)."},{"key":"e_1_3_2_1_27_1","volume-title":"USENIX Security Symposium. 1605--1622","author":"Leino Klas","year":"2020","unstructured":"Klas Leino and Matt Fredrikson . 2020 . Stolen memories: Leveraging model memorization for calibrated white-box membership inference . In USENIX Security Symposium. 1605--1622 . Klas Leino and Matt Fredrikson. 2020. Stolen memories: Leveraging model memorization for calibrated white-box membership inference. In USENIX Security Symposium. 1605--1622."},{"key":"e_1_3_2_1_28_1","volume-title":"Membership Inference Attacks and Defenses in Classification Models. In ACM Conference on Data and Application Security and Privacy (CODASPY). 5--16","author":"Li Jiacheng","year":"2021","unstructured":"Jiacheng Li , Ninghui Li , and Bruno Ribeiro . 2021 . Membership Inference Attacks and Defenses in Classification Models. In ACM Conference on Data and Application Security and Privacy (CODASPY). 5--16 . Jiacheng Li, Ninghui Li, and Bruno Ribeiro. 2021. Membership Inference Attacks and Defenses in Classification Models. In ACM Conference on Data and Application Security and Privacy (CODASPY). 5--16."},{"key":"e_1_3_2_1_29_1","volume-title":"Membership Leakage in Label-Only Exposures. In ACM Conference on Computer and Communications Security (CCS).","author":"Li Zheng","year":"2021","unstructured":"Zheng Li and Yang Zhang . 2021 . Membership Leakage in Label-Only Exposures. In ACM Conference on Computer and Communications Security (CCS). Zheng Li and Yang Zhang. 2021. Membership Leakage in Label-Only Exposures. In ACM Conference on Computer and Communications Security (CCS)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484749"},{"key":"e_1_3_2_1_31_1","volume-title":"Mario Fritz, and Yang Zhang.","author":"Liu Yugeng","year":"2021","unstructured":"Yugeng Liu , Rui Wen , Xinlei He , Ahmed Salem , Zhikun Zhang , Michael Backes , Emiliano De Cristofaro , Mario Fritz, and Yang Zhang. 2021 b. ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models . arXiv preprint arXiv:2102.02551 (2021). Yugeng Liu, Rui Wen, Xinlei He, Ahmed Salem, Zhikun Zhang, Michael Backes, Emiliano De Cristofaro, Mario Fritz, and Yang Zhang. 2021b. ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models. arXiv preprint arXiv:2102.02551 (2021)."},{"key":"e_1_3_2_1_32_1","volume-title":"Understanding membership inferences on well-generalized learning models. arXiv preprint arXiv:1802.04889","author":"Long Yunhui","year":"2018","unstructured":"Yunhui Long , Vincent Bindschaedler , Lei Wang , Diyue Bu , Xiaofeng Wang , Haixu Tang , Carl A Gunter , and Kai Chen . 2018. Understanding membership inferences on well-generalized learning models. arXiv preprint arXiv:1802.04889 ( 2018 ). Yunhui Long, Vincent Bindschaedler, Lei Wang, Diyue Bu, Xiaofeng Wang, Haixu Tang, Carl A Gunter, and Kai Chen. 2018. Understanding membership inferences on well-generalized learning models. arXiv preprint arXiv:1802.04889 (2018)."},{"key":"e_1_3_2_1_33_1","volume-title":"Causality in the social sciences. Sociological methodology","author":"Marini Margaret Mooney","year":"1988","unstructured":"Margaret Mooney Marini and Burton Singer . 1988. Causality in the social sciences. Sociological methodology , Vol. 18 ( 1988 ), 347--409. Margaret Mooney Marini and Burton Singer. 1988. Causality in the social sciences. Sociological methodology , Vol. 18 (1988), 347--409."},{"key":"e_1_3_2_1_34_1","volume-title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks. arXiv preprint arXiv:2203.03929","author":"Mireshghallah Fatemehsadat","year":"2022","unstructured":"Fatemehsadat Mireshghallah , Kartik Goyal , Archit Uniyal , Taylor Berg-Kirkpatrick , and Reza Shokri . 2022. Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks. arXiv preprint arXiv:2203.03929 ( 2022 ). Fatemehsadat Mireshghallah, Kartik Goyal, Archit Uniyal, Taylor Berg-Kirkpatrick, and Reza Shokri. 2022. Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks. arXiv preprint arXiv:2203.03929 (2022)."},{"key":"e_1_3_2_1_35_1","volume-title":"ML Privacy Meter: Aiding regulatory compliance by quantifying the privacy risks of machine learning. arXiv preprint arXiv:2007.09339","author":"Murakonda Sasi Kumar","year":"2020","unstructured":"Sasi Kumar Murakonda and Reza Shokri . 2020. ML Privacy Meter: Aiding regulatory compliance by quantifying the privacy risks of machine learning. arXiv preprint arXiv:2007.09339 ( 2020 ). Sasi Kumar Murakonda and Reza Shokri. 2020. ML Privacy Meter: Aiding regulatory compliance by quantifying the privacy risks of machine learning. arXiv preprint arXiv:2007.09339 (2020)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243855"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"e_1_3_2_1_38_1","volume-title":"Realcause: Realistic causal inference benchmarking. arXiv preprint arXiv:2011.15007","author":"Neal Brady","year":"2020","unstructured":"Brady Neal , Chin-Wei Huang , and Sunand Raghupathi . 2020 . Realcause: Realistic causal inference benchmarking. arXiv preprint arXiv:2011.15007 (2020). Brady Neal, Chin-Wei Huang, and Sunand Raghupathi. 2020. Realcause: Realistic causal inference benchmarking. arXiv preprint arXiv:2011.15007 (2020)."},{"key":"e_1_3_2_1_39_1","volume-title":"A modern take on the bias-variance tradeoff in neural networks. arXiv preprint arXiv:1810.08591","author":"Neal Brady","year":"2018","unstructured":"Brady Neal , Sarthak Mittal , Aristide Baratin , Vinayak Tantia , Matthew Scicluna , Simon Lacoste-Julien , and Ioannis Mitliagkas . 2018. A modern take on the bias-variance tradeoff in neural networks. arXiv preprint arXiv:1810.08591 ( 2018 ). Brady Neal, Sarthak Mittal, Aristide Baratin, Vinayak Tantia, Matthew Scicluna, Simon Lacoste-Julien, and Ioannis Mitliagkas. 2018. A modern take on the bias-variance tradeoff in neural networks. arXiv preprint arXiv:1810.08591 (2018)."},{"key":"e_1_3_2_1_40_1","volume-title":"1--88","author":"Official Journal of the European Union. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). , Vol. L119","year":"2016","unstructured":"Official Journal of the European Union. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). , Vol. L119 ( 2016 ), 1--88 . Official Journal of the European Union. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). , Vol. L119 (2016), 1--88."},{"key":"e_1_3_2_1_41_1","volume-title":"PyTorch: An Imperative Style","author":"Paszke Adam","unstructured":"Adam Paszke , Sam Gross , Francisco Massa , Adam Lerer , James Bradbury , Gregory Chanan , Trevor Killeen , Zeming Lin , Natalia Gimelshein , Luca Antiga , Alban Desmaison , Andreas Kopf , Edward Yang , Zachary DeVito , Martin Raison , Alykhan Tejani , Sasank Chilamkurthy , Benoit Steiner , Lu Fang , Junjie Bai , and Soumith Chintala . 2019. PyTorch: An Imperative Style , High-Performance Deep Learning Library . In Advances in Neural Information Processing Systems (NeurIPS), , H. Wallach, H. Larochelle, A. Beygelzimer, F. dtextquotesingle Alch\u00e9-Buc, E. Fox, and R. Garnett (Eds.). Curran Associates, Inc., 8024--8035. http:\/\/papers.neurips.cc\/paper\/9015-pytorch-an-imperative-style-high-performance-deep-learning-library.pdf Adam Paszke, Sam Gross, Francisco Massa, Adam Lerer, James Bradbury, Gregory Chanan, Trevor Killeen, Zeming Lin, Natalia Gimelshein, Luca Antiga, Alban Desmaison, Andreas Kopf, Edward Yang, Zachary DeVito, Martin Raison, Alykhan Tejani, Sasank Chilamkurthy, Benoit Steiner, Lu Fang, Junjie Bai, and Soumith Chintala. 2019. PyTorch: An Imperative Style, High-Performance Deep Learning Library. In Advances in Neural Information Processing Systems (NeurIPS), , H. Wallach, H. Larochelle, A. Beygelzimer, F. dtextquotesingle Alch\u00e9-Buc, E. Fox, and R. Garnett (Eds.). Curran Associates, Inc., 8024--8035. http:\/\/papers.neurips.cc\/paper\/9015-pytorch-an-imperative-style-high-performance-deep-learning-library.pdf"},{"key":"e_1_3_2_1_42_1","unstructured":"Judea Pearl. 2009. Causality. Cambridge university press.  Judea Pearl. 2009. Causality. Cambridge university press."},{"key":"e_1_3_2_1_43_1","volume-title":"On a class of bias-amplifying variables that endanger effect estimates. arXiv preprint arXiv:1203.3503","author":"Pearl Judea","year":"2012","unstructured":"Judea Pearl . 2012. On a class of bias-amplifying variables that endanger effect estimates. arXiv preprint arXiv:1203.3503 ( 2012 ). Judea Pearl. 2012. On a class of bias-amplifying variables that endanger effect estimates. arXiv preprint arXiv:1203.3503 (2012)."},{"key":"e_1_3_2_1_44_1","volume-title":"Cambridge, UK: CambridgeUniversityPress","author":"Judea Pearl","year":"2000","unstructured":"Judea Pearl et al. 2000 . Models , reasoning and inference. Cambridge, UK: CambridgeUniversityPress , Vol. 19 (2000), 2. Judea Pearl et al. 2000. Models, reasoning and inference. Cambridge, UK: CambridgeUniversityPress , Vol. 19 (2000), 2."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4612-1284-3_1"},{"key":"e_1_3_2_1_46_1","volume-title":"Combinatorial mathematics","author":"Robinson Robert W","unstructured":"Robert W Robinson . 1977. Counting unlabeled acyclic digraphs . In Combinatorial mathematics V. Springer , 28--43. Robert W Robinson. 1977. Counting unlabeled acyclic digraphs. In Combinatorial mathematics V. Springer, 28--43."},{"key":"e_1_3_2_1_47_1","volume-title":"Sensitivity analysis in observational studies. Encyclopedia of statistics in behavioral science","author":"Rosenbaum Paul R","year":"2005","unstructured":"Paul R Rosenbaum . 2005. Sensitivity analysis in observational studies. Encyclopedia of statistics in behavioral science ( 2005 ). Paul R Rosenbaum. 2005. Sensitivity analysis in observational studies. Encyclopedia of statistics in behavioral science (2005)."},{"key":"e_1_3_2_1_48_1","volume-title":"International Conference on Machine Learning (ICML). PMLR, 5558--5567","author":"Sablayrolles Alexandre","year":"2019","unstructured":"Alexandre Sablayrolles , Matthijs Douze , Cordelia Schmid , Yann Ollivier , and Herv\u00e9 J\u00e9gou . 2019 . White-box vs black-box: Bayes optimal strategies for membership inference . In International Conference on Machine Learning (ICML). PMLR, 5558--5567 . Alexandre Sablayrolles, Matthijs Douze, Cordelia Schmid, Yann Ollivier, and Herv\u00e9 J\u00e9gou. 2019. White-box vs black-box: Bayes optimal strategies for membership inference. In International Conference on Machine Learning (ICML). PMLR, 5558--5567."},{"key":"e_1_3_2_1_49_1","volume-title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Network and Distributed Systems Security Symposium (NDSS). Internet Society.","author":"Salem Ahmed","year":"2019","unstructured":"Ahmed Salem , Yang Zhang , Mathias Humbert , Mario Fritz , and Michael Backes . 2019 . ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Network and Distributed Systems Security Symposium (NDSS). Internet Society. Ahmed Salem, Yang Zhang, Mathias Humbert, Mario Fritz, and Michael Backes. 2019. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. In Network and Distributed Systems Security Symposium (NDSS). Internet Society."},{"key":"e_1_3_2_1_50_1","volume-title":"Estimating the dimension of a model. The annals of statistics","author":"Schwarz Gideon","year":"1978","unstructured":"Gideon Schwarz . 1978. Estimating the dimension of a model. The annals of statistics ( 1978 ), 461--464. Gideon Schwarz. 1978. Estimating the dimension of a model. The annals of statistics (1978), 461--464."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.18637\/jss.v035.i03"},{"key":"e_1_3_2_1_52_1","volume-title":"On Identifying Significant Edges in Graphical Models of Molecular Networks. arXiv preprint arXiv:1104.0896","author":"Scutari Marco","year":"2011","unstructured":"Marco Scutari and Radhakrishnan Nagarajan . 2011. On Identifying Significant Edges in Graphical Models of Molecular Networks. arXiv preprint arXiv:1104.0896 ( 2011 ). Marco Scutari and Radhakrishnan Nagarajan. 2011. On Identifying Significant Edges in Graphical Models of Molecular Networks. arXiv preprint arXiv:1104.0896 (2011)."},{"key":"e_1_3_2_1_53_1","first-page":"3195","article-title":"Learning Causal Graphs with Small Interventions","volume":"28","author":"Shanmugam Karthikeyan","year":"2015","unstructured":"Karthikeyan Shanmugam , Murat Kocaoglu , Alexandros G Dimakis , and Sriram Vishwanath . 2015 . Learning Causal Graphs with Small Interventions . Advances in Neural Information Processing Systems (NeurIPS) , Vol. 28 (2015), 3195 -- 3203 . Karthikeyan Shanmugam, Murat Kocaoglu, Alexandros G Dimakis, and Sriram Vishwanath. 2015. Learning Causal Graphs with Small Interventions. Advances in Neural Information Processing Systems (NeurIPS) , Vol. 28 (2015), 3195--3203.","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"e_1_3_2_1_54_1","volume-title":"DoWhy: An End-to-End Library for Causal Inference. arXiv preprint arXiv:2011.04216","author":"Sharma Amit","year":"2020","unstructured":"Amit Sharma and Emre Kiciman . 2020. DoWhy: An End-to-End Library for Causal Inference. arXiv preprint arXiv:2011.04216 ( 2020 ). Amit Sharma and Emre Kiciman. 2020. DoWhy: An End-to-End Library for Causal Inference. arXiv preprint arXiv:2011.04216 (2020)."},{"key":"e_1_3_2_1_55_1","unstructured":"Amit Sharma Emre Kiciman etal 2019. DoWhy: A Python package for causal inference. https:\/\/github.com\/microsoft\/dowhy.  Amit Sharma Emre Kiciman et al. 2019. DoWhy: A Python package for causal inference. https:\/\/github.com\/microsoft\/dowhy."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3461702.3462533"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_1_58_1","volume-title":"Proceedings of the National Conference on Artificial Intelligence","volume":"21","author":"Shpitser Ilya","year":"2006","unstructured":"Ilya Shpitser and Judea Pearl . 2006 . Identification of joint interventional distributions in recursive semi-Markovian causal models . In Proceedings of the National Conference on Artificial Intelligence , Vol. 21 . Menlo Park, CA; Cambridge, MA; London; AAAI Press; MIT Press; 1999, 1219. Ilya Shpitser and Judea Pearl. 2006. Identification of joint interventional distributions in recursive semi-Markovian causal models. In Proceedings of the National Conference on Artificial Intelligence, Vol. 21. Menlo Park, CA; Cambridge, MA; London; AAAI Press; MIT Press; 1999, 1219."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.2517-6161.1951.tb00088.x"},{"key":"e_1_3_2_1_60_1","volume-title":"USENIX Security Symposium.","author":"Song Liwei","year":"2021","unstructured":"Liwei Song and Prateek Mittal . 2021 . Systematic evaluation of privacy risks of machine learning models . In USENIX Security Symposium. Liwei Song and Prateek Mittal. 2021. Systematic evaluation of privacy risks of machine learning models. In USENIX Security Symposium."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00021"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354211"},{"key":"e_1_3_2_1_63_1","volume-title":"International Conference on Machine Learning (ICML). PMLR, 9537--9547","author":"Tople Shruti","year":"2020","unstructured":"Shruti Tople , Amit Sharma , and Aditya Nori . 2020 . Alleviating privacy attacks via causal learning . In International Conference on Machine Learning (ICML). PMLR, 9537--9547 . Shruti Tople, Amit Sharma, and Aditya Nori. 2020. Alleviating privacy attacks via causal learning. In International Conference on Machine Learning (ICML). PMLR, 9537--9547."},{"key":"e_1_3_2_1_64_1","volume-title":"Predicting causal relationships from biological data: Applying automated causal discovery on mass cytometry data of human immune cells. Scientific reports","author":"Triantafillou Sofia","year":"2017","unstructured":"Sofia Triantafillou , Vincenzo Lagani , Christina Heinze-Deml , Angelika Schmidt , Jesper Tegner , and Ioannis Tsamardinos . 2017. Predicting causal relationships from biological data: Applying automated causal discovery on mass cytometry data of human immune cells. Scientific reports , Vol. 7 , 1 ( 2017 ), 1--11. Sofia Triantafillou, Vincenzo Lagani, Christina Heinze-Deml, Angelika Schmidt, Jesper Tegner, and Ioannis Tsamardinos. 2017. Predicting causal relationships from biological data: Applying automated causal discovery on mass cytometry data of human immune cells. Scientific reports, Vol. 7, 1 (2017), 1--11."},{"key":"e_1_3_2_1_65_1","volume-title":"Lei Yu, and Wenqi Wei.","author":"Truex Stacey","year":"2019","unstructured":"Stacey Truex , Ling Liu , Mehmet Emre Gursoy , Lei Yu, and Wenqi Wei. 2019 . Demystifying membership inference attacks in machine learning as a service. IEEE Transactions on Services Computing ( 2019). Stacey Truex, Ling Liu, Mehmet Emre Gursoy, Lei Yu, and Wenqi Wei. 2019. Demystifying membership inference attacks in machine learning as a service. IEEE Transactions on Services Computing (2019)."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00012"},{"key":"e_1_3_2_1_67_1","volume-title":"Proc. of World Academy of Science, Engineering and Technology","volume":"34","author":"Wu Huihai","year":"2008","unstructured":"Huihai Wu and Xiaohui Liu . 2008 . Dynamic bayesian networks modeling for inferring genetic regulatory networks by search strategy: Comparison between greedy hill climbing and mcmc methods . In Proc. of World Academy of Science, Engineering and Technology , Vol. 34 . Citeseer, 224--234. Huihai Wu and Xiaohui Liu. 2008. Dynamic bayesian networks modeling for inferring genetic regulatory networks by search strategy: Comparison between greedy hill climbing and mcmc methods. In Proc. of World Academy of Science, Engineering and Technology, Vol. 34. Citeseer, 224--234."},{"key":"e_1_3_2_1_68_1","volume-title":"International Conference on Machine Learning (ICML). PMLR, 10767--10777","author":"Yang Zitong","year":"2020","unstructured":"Zitong Yang , Yaodong Yu , Chong You , Jacob Steinhardt , and Yi Ma . 2020 . Rethinking bias-variance trade-off for generalization of neural networks . In International Conference on Machine Learning (ICML). PMLR, 10767--10777 . Zitong Yang, Yaodong Yu, Chong You, Jacob Steinhardt, and Yi Ma. 2020. Rethinking bias-variance trade-off for generalization of neural networks. In International Conference on Machine Learning (ICML). PMLR, 10767--10777."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417880"},{"key":"e_1_3_2_1_71_1","volume-title":"Membership Inference Attacks Against Recommender Systems. In ACM SIGSAC Conference on Computer and Communications Security (CCS). 864--879","author":"Zhang Minxing","year":"2021","unstructured":"Minxing Zhang , Zhaochun Ren , Zihan Wang , Pengjie Ren , Zhunmin Chen , Pengfei Hu , and Yang Zhang . 2021 . Membership Inference Attacks Against Recommender Systems. In ACM SIGSAC Conference on Computer and Communications Security (CCS). 864--879 . io Minxing Zhang, Zhaochun Ren, Zihan Wang, Pengjie Ren, Zhunmin Chen, Pengfei Hu, and Yang Zhang. 2021. Membership Inference Attacks Against Recommender Systems. In ACM SIGSAC Conference on Computer and Communications Security (CCS). 864--879. io"}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3560694","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3560694","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:59Z","timestamp":1750182539000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3560694"}},"subtitle":["A Causal Perspective"],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":71,"alternative-id":["10.1145\/3548606.3560694","10.1145\/3548606"],"URL":"https:\/\/doi.org\/10.1145\/3548606.3560694","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}