{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T16:23:36Z","timestamp":1781195016795,"version":"3.54.1"},"reference-count":95,"publisher":"Association for Computing Machinery (ACM)","issue":"ETRA","license":[{"start":{"date-parts":[[2024,5,20]],"date-time":"2024-05-20T00:00:00Z","timestamp":1716163200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Hum.-Comput. Interact."],"published-print":{"date-parts":[[2024,5,20]]},"abstract":"<jats:p>Latest gaze estimation methods require large-scale training data but their collection and exchange pose significant privacy risks. We propose PrivatEyes - the first privacy-enhancing training approach for appearance-based gaze estimation based on federated learning (FL) and secure multi-party computation (MPC). PrivatEyes enables training gaze estimators on multiple local datasets across different users and server-based secure aggregation of the individual estimators' updates. PrivatEyes guarantees that individual gaze data remains private even if a majority of the aggregating servers is malicious. We also introduce a new data leakage attack DualView that shows that PrivatEyes limits the leakage of private training data more effectively than previous approaches. Evaluations on the MPIIGaze, MPIIFaceGaze, GazeCapture, and NVGaze datasets further show that the improved privacy does not lead to a lower gaze estimation accuracy or substantially higher computational costs - both of which are on par with its non-secure counterparts.<\/jats:p>","DOI":"10.1145\/3655606","type":"journal-article","created":{"date-parts":[[2024,5,28]],"date-time":"2024-05-28T16:00:05Z","timestamp":1716912005000},"page":"1-23","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["PrivatEyes: Appearance-based Gaze Estimation Using Federated Secure Multi-Party Computation"],"prefix":"10.1145","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6490-9139","authenticated-orcid":false,"given":"Mayar","family":"Elfares","sequence":"first","affiliation":[{"name":"Institute for Visualisation and Interactive Systems and Institute of Information Security, University of Stuttgart, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1808-6140","authenticated-orcid":false,"given":"Pascal","family":"Reisert","sequence":"additional","affiliation":[{"name":"Institute of Information Security, University of Stuttgart, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5105-9753","authenticated-orcid":false,"given":"Zhiming","family":"Hu","sequence":"additional","affiliation":[{"name":"Institute for Visualisation and Interactive Systems and Institute for Modelling and Simulation of Biomechanical Systems, University of Stuttgart, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-6995-3497","authenticated-orcid":false,"given":"Wenwu","family":"Tang","sequence":"additional","affiliation":[{"name":"University of Stuttgart, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9071-9312","authenticated-orcid":false,"given":"Ralf","family":"K\u00fcsters","sequence":"additional","affiliation":[{"name":"Institute of Information Security, University of Stuttgart, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6317-7303","authenticated-orcid":false,"given":"Andreas","family":"Bulling","sequence":"additional","affiliation":[{"name":"Institute for Visualisation and Interactive Systems, University of Stuttgart, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,28]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376449"},{"key":"e_1_2_1_2_1","volume-title":"Advances in Neural Information Processing Systems","volume":"6","author":"Baluja Shumeet","year":"1993","unstructured":"Shumeet Baluja and Dean Pomerleau. 1993. Non-intrusive gaze tracking using artificial neural networks. Advances in Neural Information Processing Systems , Vol. 6 (1993)."},{"key":"e_1_2_1_3_1","volume-title":"Assessing differentially private deep learning with membership inference. arXiv preprint arXiv:1912.11328","author":"Bernau Daniel","year":"2019","unstructured":"Daniel Bernau, Philip-William Grassal, Jonas Robl, and Florian Kerschbaum. 2019. Assessing differentially private deep learning with membership inference. arXiv preprint arXiv:1912.11328 (2019)."},{"key":"e_1_2_1_4_1","volume-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 3143--3152","author":"Pradipta","unstructured":"Pradipta Biswas et al. 2021. Appearance-based gaze estimation using attention and difference mechanism. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 3143--3152."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3500240"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0255979"},{"key":"e_1_2_1_8_1","volume-title":"Eye-tracked Virtual Reality: A Comprehensive Survey on Methods and Privacy Challenges. arXiv preprint arXiv:2305.14080","author":"Bozkir Efe","year":"2023","unstructured":"Efe Bozkir, S\u00fcleyman \u00d6zdel, Mengdi Wang, Brendan David-John, Hong Gao, Kevin Butler, Eakta Jain, and Enkelejda Kasneci. 2023. Eye-tracked Virtual Reality: A Comprehensive Survey on Methods and Privacy Challenges. arXiv preprint arXiv:2305.14080 (2023)."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3379156.3391364"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2010.86"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2030112.2030172"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2470697"},{"key":"e_1_2_1_13_1","volume-title":"Rofl: Attestable robustness for secure federated learning. arXiv preprint arXiv:2107.03311","author":"Burkhalter Lukas","year":"2021","unstructured":"Lukas Burkhalter, Hidde Lycklama, Alexander Viand, Nicolas K\u00fcchler, and Anwar Hithnawi. 2021. Rofl: Attestable robustness for secure federated learning. arXiv preprint arXiv:2107.03311 (2021)."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376449"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2014.02.017"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2008.4761343"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/URAI.2013.6677362"},{"key":"e_1_2_1_18_1","volume-title":"EIFFeL: Ensuring Integrity for Federated Learning. arXiv preprint arXiv:2112.12727","author":"Chowdhury Amrita Roy","year":"2021","unstructured":"Amrita Roy Chowdhury, Chuan Guo, Somesh Jha, and Laurens van der Maaten. 2021. EIFFeL: Ensuring Integrity for Federated Learning. arXiv preprint arXiv:2112.12727 (2021)."},{"key":"e_1_2_1_19_1","volume-title":"International Conference on Financial Cryptography and Data Security. Springer, 169--187","author":"Damg\u00e5rd Ivan","year":"2016","unstructured":"Ivan Damg\u00e5rd, Kasper Damg\u00e5rd, Kurt Nielsen, Peter Sebastian Nordholt, and Tomas Toft. 2016. Confidential benchmarking based on multiparty computation. In International Conference on Financial Cryptography and Data Security. Springer, 169--187."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32009-5_38"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_24"},{"key":"e_1_2_1_22_1","volume-title":"Foundations and Trends\u00ae in Theoretical Computer Science","volume":"9","author":"Dwork Cynthia","year":"2014","unstructured":"Cynthia Dwork, Aaron Roth, et al. 2014. The algorithmic foundations of differential privacy. Foundations and Trends\u00ae in Theoretical Computer Science, Vol. 9, 3--4 (2014), 211--407."},{"key":"e_1_2_1_23_1","volume-title":"Proc. NeurIPS Workshop on Gaze Meets ML (GMML). 1--11","author":"Elfares Mayar","year":"2022","unstructured":"Mayar Elfares, Zhiming Hu, Pascal Reisert, Andreas Bulling, and Ralf K\u00fcsters. 2022. Federated Learning for Appearance-based Gaze Estimation in the Wild. In Proc. NeurIPS Workshop on Gaze Meets ML (GMML). 1--11."},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.3758\/s13428-017-0857-y"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00017"},{"key":"e_1_2_1_26_1","doi-asserted-by":"crossref","unstructured":"Matt Fredrikson Somesh Jha and Thomas Ristenpart. 2015. Model inversion attacks that exploit confidence information and basic countermeasures. In ACM CCS. 1322--1333.","DOI":"10.1145\/2810103.2813677"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","unstructured":"Filippo Galli Sayan Biswas Kangsoo Jung Tommaso Cucinotta and Catuscia Palamidessi. 2022. Group privacy for personalized federated learning. https:\/\/doi.org\/10.48550\/ARXIV.2206.03396","DOI":"10.48550\/ARXIV.2206.03396"},{"key":"e_1_2_1_28_1","first-page":"16937","article-title":"Inverting gradients-how easy is it to break privacy in federated learning","volume":"33","author":"Geiping Jonas","year":"2020","unstructured":"Jonas Geiping, Hartmut Bauermeister, Hannah Dr\u00f6ge, and Michael Moeller. 2020. Inverting gradients-how easy is it to break privacy in federated learning? Advances in Neural Information Processing Systems , Vol. 33 (2020), 16937--16947.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_2_1_29_1","volume-title":"International conference on machine learning. PMLR, 201--210","author":"Gilad-Bachrach Ran","year":"2016","unstructured":"Ran Gilad-Bachrach, Nathan Dowlin, Kim Laine, Kristin Lauter, Michael Naehrig, and John Wernsing. 2016. Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy. In International conference on machine learning. PMLR, 201--210."},{"key":"e_1_2_1_30_1","doi-asserted-by":"crossref","unstructured":"Dan Witzner Hansen and Qiang Ji. 2009. In the eye of the beholder: A survey of models for eyes and gaze. IEEE transactions on pattern analysis and machine intelligence Vol. 32 3 (2009) 478--500.","DOI":"10.1109\/TPAMI.2009.30"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359824"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1117309.1117349"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3172944.3172960"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134012"},{"key":"e_1_2_1_35_1","volume-title":"Eye-tracking dysfunctions in schizophrenic patients and their relatives. Archives of general psychiatry","author":"Holzman Philip S","year":"1974","unstructured":"Philip S Holzman, Leonard R Proctor, Deborah L Levy, Nicholas J Yasillo, Herbert Y Meltzer, and Stephen W Hurt. 1974. Eye-tracking dysfunctions in schizophrenic patients and their relatives. Archives of general psychiatry , Vol. 31, 2 (1974), 143--151."},{"key":"e_1_2_1_36_1","volume-title":"Eye movements during everyday behavior predict personality traits. Frontiers in Human Neuroscience","author":"Hoppe Sabrina","year":"2018","unstructured":"Sabrina Hoppe, Tobias Loetscher, Stephanie A Morey, and Andreas Bulling. 2018. Eye movements during everyday behavior predict personality traits. Frontiers in Human Neuroscience (2018), 105."},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858404"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2964284.2964318"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025794"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1212\/WNL.34.1.99"},{"key":"e_1_2_1_41_1","unstructured":"Swati Jindal and Roberto Manduchi. 2022. Contrastive Representation Learning for Gaze Estimation."},{"key":"e_1_2_1_42_1","unstructured":"Peter Kairouz H. Brendan McMahan Brendan Avent Aur\u00e9lien Bellet Mehdi Bennis Arjun Nitin Bhagoji K. A. Bonawitz Zachary Charles Graham Cormode Rachel Cummings Rafael G.L. D'Oliveira Salim El Rouayheb David Evans Josh Gardner Zachary Garrett Adri\u00e0 Gasc\u00f3n Badih Ghazi Phillip B. Gibbons Marco Gruteser Zaid Harchaoui Chaoyang He Lie He Zhouyuan Huo Ben Hutchinson Justin Hsu Martin Jaggi Tara Javidi Gauri Joshi Mikhail Khodak Jakub Kone?n\u00fd Aleksandra Korolova Farinaz Koushanfar Sanmi Koyejo Tancr\u00e8de Lepoint Yang Liu Prateek Mittal Mehryar Mohri Richard Nock Ayfer \u00d6zg\u00fcr Rasmus Pagh Mariana Raykova Hang Qi Daniel Ramage Ramesh Raskar Dawn Song Weikang Song Sebastian U. Stich Ziteng Sun Ananda Theertha Suresh Florian Tram\u00e8r Praneeth Vepakomma Jianyu Wang Li Xiong Zheng Xu Qiang Yang Felix X. Yu Han Yu and Sen Zhao. 2019. Advances and Open Problems in Federated Learning. (2019). https:\/\/arxiv.org\/abs\/1912.04977"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417872"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-78372-7_6"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/1989323.1989345"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300780"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-377-6.50045-1"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.239"},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2022.3165063"},{"key":"e_1_2_1_50_1","volume-title":"30th USENIX Security Symposium. 1793--1810","author":"Li Jingjie","year":"2021","unstructured":"Jingjie Li, Amrita Roy Chowdhury, Kassem Fawaz, and Younghyun Kim. 2021. $$Kal$varepsilon$ido$$:$$Real-Time$$ Privacy Control for $$Eye-Tracking$$ Systems. In 30th USENIX Security Symposium. 1793--1810."},{"key":"e_1_2_1_51_1","volume-title":"Membership inference attacks and defenses in supervised learning via generalization gap. ArXiv","author":"Li Jiacheng","year":"2062","unstructured":"Jiacheng Li, Ninghui Li, and Bruno Ribeiro. 2020. Membership inference attacks and defenses in supervised learning via generalization gap. ArXiv , Vol. abs\/2002.12062 (2020)."},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2509315.2509318"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314111.3319823"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-021-00105-6"},{"key":"e_1_2_1_56_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Liu Yugeng","year":"2022","unstructured":"Yugeng Liu, Rui Wen, Xinlei He, Ahmed Salem, Zhikun Zhang, Michael Backes, Emiliano De Cristofaro, Mario Fritz, and Yang Zhang. 2022a. $$ML-Doctor$$: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models. In 31st USENIX Security Symposium (USENIX Security 22). 4525--4542."},{"key":"e_1_2_1_57_1","unstructured":"Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017. Communication-efficient learning of deep networks from decentralized data. In Artificial intelligence and statistics. PMLR 1273--1282."},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243760"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2002.1047459"},{"key":"e_1_2_1_62_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Nguyen Thien Duc","year":"2022","unstructured":"Thien Duc Nguyen, Phillip Rieger, Roberta De Viti, Huili Chen, Bj\u00f6rn B Brandenburg, Hossein Yalame, Helen M\u00f6llering, Hossein Fereidooni, Samuel Marchal, Markus Miettinen, et al. 2022. $$FLAME$$: Taming backdoors in federated learning. In 31st USENIX Security Symposium (USENIX Security 22). 1415--1432."},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250790.1250803"},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3379157.3391989"},{"key":"e_1_2_1_65_1","unstructured":"Jiawei Qin Takuru Shimoyama Xucong Zhang and Yusuke Sugano. 2023. Domain-Adaptive Full-Face Gaze Estimation via Novel-View-Synthesis and Feature Disentanglement. arxiv: 2305.16140 [cs.CV]"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179468"},{"key":"e_1_2_1_67_1","volume-title":"Sanjiv Kumar, and H Brendan McMahan.","author":"Reddi Sashank","year":"2020","unstructured":"Sashank Reddi, Zachary Charles, Manzil Zaheer, Zachary Garrett, Keith Rush, Jakub Konevc n\u1ef3 , Sanjiv Kumar, and H Brendan McMahan. 2020. Adaptive federated optimization. arXiv preprint arXiv:2003.00295 (2020)."},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196023"},{"key":"e_1_2_1_69_1","volume-title":"29th USENIX security symposium (USENIX Security 20). 1291--1308.","author":"Salem Ahmed","unstructured":"Ahmed Salem, Apratim Bhattacharya, Michael Backes, Mario Fritz, and Yang Zhang. 2020. $$Updates-Leak$$: Data set inference and reconstruction attacks in online learning. In 29th USENIX security symposium (USENIX Security 20). 1291--1308."},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.5709\/acp-0223-1"},{"key":"e_1_2_1_71_1","volume-title":"Membership inference attacks against machine learning models","author":"Shokri Reza","unstructured":"Reza Shokri, Marco Stronati, Congzheng Song, and Vitaly Shmatikov. 2017. Membership inference attacks against machine learning models. In IEEE S&P. 3--18."},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/2501988.2501994"},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/2750858.2807520"},{"key":"e_1_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314111.3319915"},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.235"},{"key":"e_1_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/3130971"},{"key":"e_1_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/2857491.2857520"},{"key":"e_1_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2011.2162740"},{"key":"e_1_2_1_79_1","first-page":"30","article-title":"Attentive user interfaces","volume":"46","author":"Roel Vertegaal","year":"2003","unstructured":"Roel Vertegaal et al. 2003. Attentive user interfaces. Commun. ACM, Vol. 46, 3 (2003), 30--33.","journal-title":"Commun. ACM"},{"key":"e_1_2_1_80_1","volume-title":"The emergence of deepfake technology: A review. Technology innovation management review","author":"Westerlund Mika","year":"2019","unstructured":"Mika Westerlund. 2019. The emergence of deepfake technology: A review. Technology innovation management review , Vol. 9, 11 (2019)."},{"key":"e_1_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46448-0_18"},{"key":"e_1_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/2857491.2857492"},{"key":"e_1_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2016.32"},{"key":"e_1_2_1_84_1","volume-title":"Diversity-sensitive conditional generative adversarial networks. arXiv preprint arXiv:1901.09024","author":"Yang Dingdong","year":"2019","unstructured":"Dingdong Yang, Seunghoon Hong, Yunseok Jang, Tianchen Zhao, and Honglak Lee. 2019. Diversity-sensitive conditional generative adversarial networks. arXiv preprint arXiv:1901.09024 (2019)."},{"key":"e_1_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025171.3025219"},{"key":"e_1_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00734"},{"key":"e_1_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174198"},{"key":"e_1_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_22"},{"key":"e_1_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.1145\/3126594.3126614"},{"key":"e_1_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7299081"},{"key":"e_1_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.284"},{"key":"e_1_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2778103"},{"key":"e_1_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00033"},{"key":"e_1_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.463"},{"key":"e_1_2_1_95_1","volume-title":"Konda Reddy Mopuri, and Hakan Bilen","author":"Zhao Bo","year":"2020","unstructured":"Bo Zhao, Konda Reddy Mopuri, and Hakan Bilen. 2020. idlg: Improved deep leakage from gradients. arXiv preprint arXiv:2001.02610 (2020)."}],"container-title":["Proceedings of the ACM on Human-Computer Interaction"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3655606","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3655606","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:22:52Z","timestamp":1755912172000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3655606"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,20]]},"references-count":95,"journal-issue":{"issue":"ETRA","published-print":{"date-parts":[[2024,5,20]]}},"alternative-id":["10.1145\/3655606"],"URL":"https:\/\/doi.org\/10.1145\/3655606","relation":{},"ISSN":["2573-0142"],"issn-type":[{"value":"2573-0142","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,5,20]]},"assertion":[{"value":"2024-05-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}