{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,28]],"date-time":"2026-09-28T18:34:02Z","timestamp":1790620442864,"version":"4.1.0"},"reference-count":33,"publisher":"MIT Press - Journals","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Transactions of the Association for Computational Linguistics"],"published-print":{"date-parts":[[2020,12]]},"abstract":"<jats:p> Data privacy is an important issue for \u201cmachine learning as a service\u201d providers. We focus on the problem of membership inference attacks: Given a data sample and black-box access to a model\u2019s API, determine whether the sample existed in the model\u2019s training data. Our contribution is an investigation of this problem in the context of sequence-to-sequence models, which are important in applications such as machine translation and video captioning. We define the membership inference problem for sequence generation, provide an open dataset based on state-of-the-art machine translation models, and report initial results on whether these models leak private information against several kinds of membership inference attacks. <\/jats:p>","DOI":"10.1162\/tacl_a_00299","type":"journal-article","created":{"date-parts":[[2020,3,12]],"date-time":"2020-03-12T14:05:38Z","timestamp":1584021938000},"page":"49-63","source":"Crossref","is-referenced-by-count":59,"title":["Membership Inference Attacks on Sequence-to-Sequence Models: Is My                     Data In Your Machine Translation System?"],"prefix":"10.1162","volume":"8","author":[{"given":"Sorami","family":"Hisamoto","sequence":"first","affiliation":[{"name":"Works Applications."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Matt","family":"Post","sequence":"additional","affiliation":[{"name":"Johns Hopkins University."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kevin","family":"Duh","sequence":"additional","affiliation":[{"name":"Johns Hopkins University."}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"281","reference":[{"key":"bib1","doi-asserted-by":"crossref","first-page":"169","DOI":"10.18653\/v1\/W17-4717","volume-title":"Proceedings of the Second Conference on Machine Translation","author":"Bojar Ond\u0159ej","year":"2017"},{"key":"bib2","first-page":"131","volume-title":"Proceedings of the First Conference on Machine Translation","author":"Bojar Ond\u0159ej","year":"2016"},{"key":"bib3","doi-asserted-by":"crossref","first-page":"272","DOI":"10.18653\/v1\/W18-6401","volume-title":"Proceedings of the Third Conference on Machine Translation: Shared Task Papers","author":"Bojar Ond\u0159ej","year":"2018"},{"key":"bib4","author":"Carlini Nicholas","year":"2018","journal-title":"CoRR"},{"key":"bib5","first-page":"4171","volume-title":"Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers)","author":"Devlin Jacob","year":"2019"},{"key":"bib6","unstructured":"Kevin Duh. 2018.                         The multitarget TED talks task. http:\/\/www.cs.jhu.edu\/~kevinduh\/a\/multitarget-tedtalks\/."},{"key":"bib7","first-page":"1","volume-title":"Theory and Applications of Models of Computation","author":"Dwork Cynthia","year":"2008"},{"key":"bib8","author":"Hayes Jamie","year":"2017","journal-title":"CoRR"},{"key":"bib9","author":"Hieber Felix","year":"2017","journal-title":"CoRR"},{"key":"bib10","doi-asserted-by":"crossref","first-page":"888","DOI":"10.18653\/v1\/W18-6478","volume-title":"Proceedings of the Third Conference on Machine Translation: Shared Task Papers","author":"Junczys-Dowmunt Marcin","year":"2018"},{"key":"bib11","doi-asserted-by":"crossref","first-page":"117","DOI":"10.18653\/v1\/P19-3020","volume-title":"Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics: System Demonstrations","author":"Kepler Fabio","year":"2019"},{"key":"bib12","first-page":"562","volume-title":"Proceedings of the Second Conference on Machine Translation","author":"Kim Hyun","year":"2017"},{"key":"bib13","author":"Kingma Diederik P.","year":"2015","journal-title":"CoRR"},{"key":"bib14","volume-title":"Proceedings of the First Workshop on Neural Machine Translation","author":"Koehn Philipp","year":"2017"},{"key":"bib15","first-page":"605","volume-title":"Proceedings of the 42nd Meeting of the Association for Computational Linguistics (ACL\u201904), Main Volume","author":"Lin Chin-Yew","year":"2004"},{"key":"bib16","author":"Long Yunhui","year":"2018","journal-title":"CoRR"},{"key":"bib17","doi-asserted-by":"crossref","first-page":"1727","DOI":"10.1145\/3035918.3054779","volume-title":"Proceedings of the 2017 ACM International Conference on Management of Data","author":"Machanavajjhala Ashwin","year":"2017"},{"key":"bib18","doi-asserted-by":"crossref","first-page":"634","DOI":"10.1145\/3243734.3243855","volume-title":"Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security","author":"Nasr Milad","year":"2018"},{"key":"bib19","volume-title":"2019 IEEE Symposium on Security and Privacy (SP)","author":"Nasr Milad","year":"2019"},{"key":"bib20","first-page":"311","volume-title":"Proceedings of 40th Annual Meeting of the Association for Computational Linguistics","author":"Papineni Kishore","year":"2002"},{"key":"bib21","doi-asserted-by":"crossref","first-page":"186","DOI":"10.18653\/v1\/W18-6319","volume-title":"Proceedings of the Third Conference on Machine Translation: Research Papers","author":"Post Matt","year":"2018"},{"key":"bib22","author":"Pyrgelis Apostolos","year":"2018","journal-title":"CoRR"},{"key":"bib23","first-page":"61","volume":"11","author":"Md Atiqur Rahman","year":"2018","journal-title":"Transactions on Data Privacy"},{"key":"bib24","author":"Salem Ahmed","year":"2018","journal-title":"CoRR"},{"key":"bib25","doi-asserted-by":"crossref","first-page":"1715","DOI":"10.18653\/v1\/P16-1162","volume-title":"Proceedings of the 54th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","author":"Sennrich Rico","year":"2016"},{"key":"bib26","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1109\/SP.2017.41","volume-title":"2017 IEEE Symposium on Security and Privacy (SP)","author":"Shokri R.","year":"2017"},{"key":"bib27","doi-asserted-by":"crossref","first-page":"196","DOI":"10.1145\/3292500.3330885","volume-title":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","author":"Song Congzheng","year":"2019"},{"key":"bib28","unstructured":"Lucia Specia,                                 Varvara Logacheva,                                 Frederic Blain,                                 Ramon Fernandez, and                                 Andr\u00e9 Martins.                         2018. WMT18 quality estimation shared task                         training and development data. LINDAT\/CLARIN                         digital library at the Institute of Formal and Applied Linguistics                         (\u00daFAL), Faculty of Mathematics and Physics, Charles                         University."},{"key":"bib29","volume-title":"Proceedings of the Eight International Conference on Language Resources and Evaluation (LREC\u201912)","author":"Tiedemann J\u00f6rg","year":"2012"},{"key":"bib30","author":"Truex Stacey","year":"2018","journal-title":"CoRR"},{"key":"bib31","first-page":"5998","volume-title":"Advances in Neural Information Processing Systems 30","author":"Vaswani Ashish","year":"2017"},{"key":"bib32","volume":"376","author":"Veale Michael","year":"2018","journal-title":"Philosophical Transactions. Series A, Mathematical, Physical, and Engineering Sciences"},{"key":"bib33","author":"Yeom Samuel","year":"2017","journal-title":"CoRR"}],"container-title":["Transactions of the Association for Computational Linguistics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mitpressjournals.org\/doi\/pdf\/10.1162\/tacl_a_00299","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,3,12]],"date-time":"2021-03-12T21:39:32Z","timestamp":1615585172000},"score":1,"resource":{"primary":{"URL":"https:\/\/direct.mit.edu\/tacl\/article\/43536"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12]]},"references-count":33,"alternative-id":["10.1162\/tacl_a_00299"],"URL":"https:\/\/doi.org\/10.1162\/tacl_a_00299","relation":{},"ISSN":["2307-387X"],"issn-type":[{"value":"2307-387X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,12]]}}}