{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,10]],"date-time":"2025-12-10T05:10:36Z","timestamp":1765343436384,"version":"3.46.0"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62171248, 62301189"],"award-info":[{"award-number":["62171248, 62301189"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shenzhen Science and Technology Program","award":["KJZD20240903103702004, JCYJ20220818101012025, GXWD20220811172936001"],"award-info":[{"award-number":["KJZD20240903103702004, JCYJ20220818101012025, GXWD20220811172936001"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,27]]},"DOI":"10.1145\/3746027.3754700","type":"proceedings-article","created":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T07:26:55Z","timestamp":1761377215000},"page":"11209-11217","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["ICAS: Detecting Training Data from Autoregressive Image Generative Models"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-8525-1565","authenticated-orcid":false,"given":"Hongyao","family":"Yu","sequence":"first","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China and Harbin Institute of Technology, Shenzhen, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3444-5807","authenticated-orcid":false,"given":"Yixiang","family":"Qiu","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-0022-7990","authenticated-orcid":false,"given":"Yiheng","family":"Yang","sequence":"additional","affiliation":[{"name":"Harbin Institute of Technology, Shenzhen, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-0271-6579","authenticated-orcid":false,"given":"Hao","family":"Fang","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-8730-1878","authenticated-orcid":false,"given":"Tianqu","family":"Zhuang","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-2582-2826","authenticated-orcid":false,"given":"Jiaxin","family":"Hong","sequence":"additional","affiliation":[{"name":"Harbin Institute of Technology, Shenzhen, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4798-230X","authenticated-orcid":false,"given":"Bin","family":"Chen","sequence":"additional","affiliation":[{"name":"Harbin Institute of Technology, Shenzhen, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-9034-4330","authenticated-orcid":false,"given":"Hao","family":"Wu","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China and Shenzhen ShenNong Information Technology Co., Ltd., Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8639-982X","authenticated-orcid":false,"given":"Shu-Tao","family":"Xia","sequence":"additional","affiliation":[{"name":"Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Diogo Almeida, Janko Altenschmidt, Sam Altman, Shyamal Anadkat, et al.","author":"Achiam Josh","year":"2023","unstructured":"Josh Achiam, Steven Adler, Sandhini Agarwal, Lama Ahmad, Ilge Akkaya, Florencia Leoni Aleman, Diogo Almeida, Janko Altenschmidt, Sam Altman, Shyamal Anadkat, et al., 2023. Gpt-4 technical report. arXiv preprint arXiv:2303.08774 (2023)."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01103"},{"key":"e_1_3_2_1_4_1","volume-title":"Toward Guidance-Free AR Visual Generation via Condition Contrastive Alignment. arXiv preprint arXiv:2410.09347","author":"Chen Huayu","year":"2024","unstructured":"Huayu Chen, Hang Su, Peize Sun, and Jun Zhu. 2024. Toward Guidance-Free AR Visual Generation via Condition Contrastive Alignment. arXiv preprint arXiv:2410.09347 (2024)."},{"key":"e_1_3_2_1_5_1","first-page":"1","article-title":"SSS: Signature-Sequence-Statistical Model for Exploring the Impact of Prenatal Depression on Newborns' Brain Using FNIRS. In 2025 IEEE 22nd International Symposium on Biomedical Imaging (ISBI)","author":"Chen Zhaojin","year":"2025","unstructured":"Zhaojin Chen, Sijin Yu, Xuejiao Li, Huirong Lei, Jiyu Qian, Yingxue Yao, Zicong Zheng, Guodong Liang, Xiaofen Xing, Xin Zhang, et al., 2025. SSS: Signature-Sequence-Statistical Model for Exploring the Impact of Prenatal Depression on Newborns' Brain Using FNIRS. In 2025 IEEE 22nd International Symposium on Biomedical Imaging (ISBI). IEEE, 1-4.","journal-title":"IEEE"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"e_1_3_2_1_7_1","volume-title":"International Conference on Machine Learning. PMLR, 8717-8730","author":"Duan Jinhao","year":"2023","unstructured":"Jinhao Duan, Fei Kong, Shiqi Wang, Xiaoshuang Shi, and Kaidi Xu. 2023. Are diffusion models vulnerable to membership inference attacks?. In International Conference on Machine Learning. PMLR, 8717-8730."},{"key":"e_1_3_2_1_8_1","volume-title":"Forty-first international conference on machine learning.","author":"Esser Patrick","year":"2024","unstructured":"Patrick Esser, Sumith Kulal, Andreas Blattmann, Rahim Entezari, Jonas M\u00fcller, Harry Saini, Yam Levi, Dominik Lorenz, Axel Sauer, Frederic Boesel, et al., 2024. Scaling rectified flow transformers for high-resolution image synthesis. In Forty-first international conference on machine learning."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00458"},{"key":"e_1_3_2_1_10_1","volume-title":"Privacy leakage on dnns: A survey of model inversion attacks and defenses. arXiv preprint arXiv:2402.04013","author":"Fang Hao","year":"2024","unstructured":"Hao Fang, Yixiang Qiu, Hongyao Yu, Wenbo Yu, Jiawei Kong, Baoli Chong, Bin Chen, Xuan Wang, Shu-Tao Xia, and Ke Xu. 2024. Privacy leakage on dnns: A survey of model inversion attacks and defenses. arXiv preprint arXiv:2402.04013 (2024)."},{"key":"e_1_3_2_1_11_1","volume-title":"A probabilistic fluctuation based membership inference attack for diffusion models. arXiv preprint arXiv:2308.12143","author":"Fu Wenjie","year":"2023","unstructured":"Wenjie Fu, Huandong Wang, Chen Gao, Guanghua Liu, Yong Li, and Tao Jiang. 2023. A probabilistic fluctuation based membership inference attack for diffusion models. arXiv preprint arXiv:2308.12143 (2023)."},{"key":"e_1_3_2_1_12_1","volume-title":"Mamba: Linear-time sequence modeling with selective state spaces. arXiv preprint arXiv:2312.00752","author":"Gu Albert","year":"2023","unstructured":"Albert Gu and Tri Dao. 2023. Mamba: Linear-time sequence modeling with selective state spaces. arXiv preprint arXiv:2312.00752 (2023)."},{"key":"e_1_3_2_1_13_1","volume-title":"Neighboring Autoregressive Modeling for Efficient Visual Generation. arXiv preprint arXiv:2503.10696","author":"He Yefei","year":"2025","unstructured":"Yefei He, Yuanyu He, Shaoxuan He, Feng Chen, Hong Zhou, Kaipeng Zhang, and Bohan Zhuang. 2025. Neighboring Autoregressive Modeling for Efficient Visual Generation. arXiv preprint arXiv:2503.10696 (2025)."},{"key":"e_1_3_2_1_14_1","unstructured":"Tom Henighan Jared Kaplan Mor Katz Mark Chen Christopher Hesse Jacob Jackson Heewoo Jun Tom B Brown Prafulla Dhariwal Scott Gray et al. 2020. Scaling laws for autoregressive generative modeling. arXiv preprint arXiv:2010.14701 (2020)."},{"key":"e_1_3_2_1_15_1","volume-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium. Advances in neural information processing systems","author":"Heusel Martin","year":"2017","unstructured":"Martin Heusel, Hubert Ramsauer, Thomas Unterthiner, Bernhard Nessler, and Sepp Hochreiter. 2017. Gans trained by a two time-scale update rule converge to a local nash equilibrium. Advances in neural information processing systems, Vol. 30 (2017)."},{"key":"e_1_3_2_1_16_1","volume-title":"Classifier-free diffusion guidance. arXiv preprint arXiv:2207.12598","author":"Ho Jonathan","year":"2022","unstructured":"Jonathan Ho and Tim Salimans. 2022. Classifier-free diffusion guidance. arXiv preprint arXiv:2207.12598 (2022)."},{"key":"e_1_3_2_1_17_1","volume-title":"Scaling laws for neural language models. arXiv preprint arXiv:2001.08361","author":"Kaplan Jared","year":"2020","unstructured":"Jared Kaplan, Sam McCandlish, Tom Henighan, Tom B Brown, Benjamin Chess, Rewon Child, Scott Gray, Alec Radford, Jeffrey Wu, and Dario Amodei. 2020. Scaling laws for neural language models. arXiv preprint arXiv:2001.08361 (2020)."},{"key":"e_1_3_2_1_18_1","volume-title":"An efficient membership inference attack for the diffusion model by proximal initialization. arXiv preprint arXiv:2305.18355","author":"Kong Fei","year":"2023","unstructured":"Fei Kong, Jinhao Duan, RuiPeng Ma, Hengtao Shen, Xiaofeng Zhu, Xiaoshuang Shi, and Kaidi Xu. 2023. An efficient membership inference attack for the diffusion model by proximal initialization. arXiv preprint arXiv:2305.18355 (2023)."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3681170"},{"key":"e_1_3_2_1_20_1","first-page":"98645","article-title":"Membership Inference Attacks against Large Vision-Language Models","volume":"37","author":"Li Zhan","year":"2024","unstructured":"Zhan Li, Yongtao Wu, Yihang Chen, Francesco Tonin, Elias Abad Rocamora, and Volkan Cevher. 2024b. Membership Inference Attacks against Large Vision-Language Models. Advances in Neural Information Processing Systems, Vol. 37 (2024), 98645-98674.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW59333.2023.00013"},{"key":"e_1_3_2_1_22_1","volume-title":"European Conference on Computer Vision. Springer, 109-126","author":"Qiu Yixiang","year":"2024","unstructured":"Yixiang Qiu, Hao Fang, Hongyao Yu, Bin Chen, MeiKang Qiu, and Shu-Tao Xia. 2024a. A closer look at gan priors: Exploiting intermediate features for enhanced model inversion attacks. In European Conference on Computer Vision. Springer, 109-126."},{"key":"e_1_3_2_1_23_1","volume-title":"Mibench: A comprehensive benchmark for model inversion attack and defense. arXiv preprint arXiv:2410.05159","author":"Qiu Yixiang","year":"2024","unstructured":"Yixiang Qiu, Hongyao Yu, Hao Fang, Wenbo Yu, Bin Chen, Xuan Wang, Shu-Tao Xia, and Ke Xu. 2024b. Mibench: A comprehensive benchmark for model inversion attack and defense. arXiv preprint arXiv:2410.05159 (2024)."},{"volume-title":"Infilling Score: A Pretraining Data Detection Algorithm for Large Language Models. In The Thirteenth International Conference on Learning Representations.","author":"Raoof Negin","key":"e_1_3_2_1_24_1","unstructured":"Negin Raoof, Litu Rout, Giannis Daras, Sujay Sanghavi, Constantine Caramanis, Sanjay Shakkottai, and Alex Dimakis. [n.d.]. Infilling Score: A Pretraining Data Detection Algorithm for Large Language Models. In The Thirteenth International Conference on Learning Representations."},{"key":"e_1_3_2_1_25_1","volume-title":"M-VAR: Decoupled Scale-wise Autoregressive Modeling for High-Quality Image Generation. arXiv preprint arXiv:2411.10433","author":"Ren Sucheng","year":"2024","unstructured":"Sucheng Ren, Yaodong Yu, Nataniel Ruiz, Feng Wang, Alan Yuille, and Cihang Xie. 2024. M-VAR: Decoupled Scale-wise Autoregressive Modeling for High-Quality Image Generation. arXiv preprint arXiv:2411.10433 (2024)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP60621.2024.00012"},{"key":"e_1_3_2_1_28_1","volume-title":"Detecting pretraining data from large language models. arXiv preprint arXiv:2310.16789","author":"Shi Weijia","year":"2023","unstructured":"Weijia Shi, Anirudh Ajith, Mengzhou Xia, Yangsibo Huang, Daogao Liu, Terra Blevins, Danqi Chen, and Luke Zettlemoyer. 2023. Detecting pretraining data from large language models. arXiv preprint arXiv:2310.16789 (2023)."},{"key":"e_1_3_2_1_29_1","volume-title":"Autoregressive model beats diffusion: Llama for scalable image generation. arXiv preprint arXiv:2406.06525","author":"Sun Peize","year":"2024","unstructured":"Peize Sun, Yi Jiang, Shoufa Chen, Shilong Zhang, Bingyue Peng, Ping Luo, and Zehuan Yuan. 2024. Autoregressive model beats diffusion: Llama for scalable image generation. arXiv preprint arXiv:2406.06525 (2024)."},{"key":"e_1_3_2_1_30_1","volume-title":"Visual autoregressive modeling: Scalable image generation via next-scale prediction. Advances in neural information processing systems","author":"Tian Keyu","year":"2024","unstructured":"Keyu Tian, Yi Jiang, Zehuan Yuan, Bingyue Peng, and Liwei Wang. 2024. Visual autoregressive modeling: Scalable image generation via next-scale prediction. Advances in neural information processing systems, Vol. 37 (2024), 84839-84865."},{"key":"e_1_3_2_1_31_1","unstructured":"Aaron Van Den Oord Oriol Vinyals et al. 2017. Neural discrete representation learning. Advances in neural information processing systems Vol. 30 (2017)."},{"key":"e_1_3_2_1_32_1","volume-title":"Parallelized Autoregressive Visual Generation. arXiv preprint arXiv:2412.15119","author":"Wang Yuqing","year":"2024","unstructured":"Yuqing Wang, Shuhuai Ren, Zhijie Lin, Yujin Han, Haoyuan Guo, Zhenheng Yang, Difan Zou, Jiashi Feng, and Xihui Liu. 2024. Parallelized Autoregressive Visual Generation. arXiv preprint arXiv:2412.15119 (2024)."},{"key":"e_1_3_2_1_33_1","volume-title":"On the importance of difficulty calibration in membership inference attacks. arXiv preprint arXiv:2111.08440","author":"Watson Lauren","year":"2021","unstructured":"Lauren Watson, Chuan Guo, Graham Cormode, and Alex Sablayrolles. 2021. On the importance of difficulty calibration in membership inference attacks. arXiv preprint arXiv:2111.08440 (2021)."},{"key":"e_1_3_2_1_34_1","first-page":"268","article-title":"Privacy risk in machine learning: Analyzing the connection to overfitting. In 2018 IEEE 31st computer security foundations symposium (CSF)","author":"Yeom Samuel","year":"2018","unstructured":"Samuel Yeom, Irene Giacomelli, Matt Fredrikson, and Somesh Jha. 2018. Privacy risk in machine learning: Analyzing the connection to overfitting. In 2018 IEEE 31st computer security foundations symposium (CSF). IEEE, 268-282.","journal-title":"IEEE"},{"key":"e_1_3_2_1_35_1","volume-title":"Calor: Towards comprehensive model inversion defense. arXiv preprint arXiv:2410.05814","author":"Yu Hongyao","year":"2024","unstructured":"Hongyao Yu, Yixiang Qiu, Hao Fang, Bin Chen, Sijin Yu, Bin Wang, Shu-Tao Xia, and Ke Xu. 2024b. Calor: Towards comprehensive model inversion defense. arXiv preprint arXiv:2410.05814 (2024)."},{"key":"e_1_3_2_1_36_1","volume-title":"From Flat to Round: Redefining Brain Decoding with Surface-Based fMRI and Cortex Structure. arXiv preprint arXiv:2507.16389","author":"Yu Sijin","year":"2025","unstructured":"Sijin Yu, Zijiao Chen, Wenxuan Wu, Shengxian Chen, Zhongliang Liu, Jingxin Nie, Xiaofen Xing, Xiangmin Xu, and Xin Zhang. 2025. From Flat to Round: Redefining Brain Decoding with Surface-Based fMRI and Cortex Structure. arXiv preprint arXiv:2507.16389 (2025)."},{"key":"e_1_3_2_1_37_1","volume-title":"International Workshop on PRedictive Intelligence In MEdicine. Springer, 12-23","author":"Yu Sijin","year":"2024","unstructured":"Sijin Yu, Xuejiao Li, Huirong Lei, Yingxue Yao, Zhaojin Chen, Zicong Zheng, Guodong Liang, Xiaofen Xing, Xin Zhang, and Chengfang Xu. 2024a. Attention-based-features-fusion emotion-guided fNIRS classification network for prenatal depression recognition. In International Workshop on PRedictive Intelligence In MEdicine. Springer, 12-23."},{"key":"e_1_3_2_1_38_1","first-page":"74122","article-title":"Membership inference on text-to-image diffusion models via conditional likelihood discrepancy","volume":"37","author":"Zhai Shengfang","year":"2024","unstructured":"Shengfang Zhai, Huanran Chen, Yinpeng Dong, Jiajun Li, Qingni Shen, Yansong Gao, Hang Su, and Yang Liu. 2024. Membership inference on text-to-image diffusion models via conditional likelihood discrepancy. Advances in Neural Information Processing Systems, Vol. 37 (2024), 74122-74146.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_39_1","volume-title":"Hao Frank Yang, and Hai Li","author":"Zhang Jingyang","year":"2024","unstructured":"Jingyang Zhang, Jingwei Sun, Eric Yeats, Yang Ouyang, Martin Kuo, Jianyi Zhang, Hao Frank Yang, and Hai Li. 2024b. Min-k%: Improved baseline for detecting pre-training data from large language models. arXiv preprint arXiv:2404.02936 (2024)."},{"key":"e_1_3_2_1_40_1","volume-title":"Var-clip: Text-to-image generator with visual auto-regressive modeling. arXiv preprint arXiv:2408.01181","author":"Zhang Qian","year":"2024","unstructured":"Qian Zhang, Xiangzi Dai, Ninghua Yang, Xiang An, Ziyong Feng, and Xingyu Ren. 2024a. Var-clip: Text-to-image generator with visual auto-regressive modeling. arXiv preprint arXiv:2408.01181 (2024)."},{"key":"e_1_3_2_1_41_1","volume-title":"Pretraining data detection for large language models: A divergence-based calibration method. arXiv preprint arXiv:2409.14781","author":"Zhang Weichao","year":"2024","unstructured":"Weichao Zhang, Ruqing Zhang, Jiafeng Guo, Maarten de Rijke, Yixing Fan, and Xueqi Cheng. 2024c. Pretraining data detection for large language models: A divergence-based calibration method. arXiv preprint arXiv:2409.14781 (2024)."},{"volume-title":"The Thirteenth International Conference on Learning Representations.","author":"Zhuang Tianqu","key":"e_1_3_2_1_42_1","unstructured":"Tianqu Zhuang, Hongyao Yu, Yixiang Qiu, Hao Fang, Bin Chen, and Shu-Tao Xia. [n.d.]. Stealthy Shield Defense: A Conditional Mutual Information-Based Approach against Black-Box Model Inversion Attacks. In The Thirteenth International Conference on Learning Representations."}],"event":{"name":"MM '25: The 33rd ACM International Conference on Multimedia","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Dublin Ireland","acronym":"MM '25"},"container-title":["Proceedings of the 33rd ACM International Conference on Multimedia"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3746027.3754700","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,10]],"date-time":"2025-12-10T05:08:23Z","timestamp":1765343303000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3746027.3754700"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,27]]},"references-count":42,"alternative-id":["10.1145\/3746027.3754700","10.1145\/3746027"],"URL":"https:\/\/doi.org\/10.1145\/3746027.3754700","relation":{},"subject":[],"published":{"date-parts":[[2025,10,27]]},"assertion":[{"value":"2025-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}