中文
相关论文

相关论文: Mitigating Privacy Risk in Membership Inference by…

200 篇论文

Model inversion attacks (MIAs) aim to reconstruct class-representative samples from trained models. Recent generative MIAs utilize generative adversarial networks to learn image priors that guide the inversion process, yielding…

机器学习 · 计算机科学 2025-09-25 Xiong Peng , Bo Han , Fengfei Yu , Tongliang Liu , Feng Liu , Mingyuan Zhou

Collaborative learning (CL) is a distributed learning framework that aims to protect user privacy by allowing users to jointly train a model by sharing their gradient updates only. However, gradient inversion attacks (GIAs), which recover…

密码学与安全 · 计算机科学 2024-01-31 Lulu Xue , Shengshan Hu , Ruizhi Zhao , Leo Yu Zhang , Shengqing Hu , Lichao Sun , Dezhong Yao

Differentially private wireless federated learning (DPWFL) is a promising framework for protecting sensitive user data. However, foundational questions on how to precisely characterize privacy loss remain open, and existing work is further…

机器学习 · 计算机科学 2026-04-28 Chen Yaoling , Liang Hao , Tu Xiaotong

Neural network pruning has been an essential technique to reduce the computation and memory requirements for using deep neural networks for resource-constrained devices. Most existing research focuses primarily on balancing the sparsity and…

密码学与安全 · 计算机科学 2022-08-05 Xiaoyong Yuan , Lan Zhang

Data is the key factor to drive the development of machine learning (ML) during the past decade. However, high-quality data, in particular labeled data, is often hard and expensive to collect. To leverage large-scale unlabeled data,…

机器学习 · 计算机科学 2021-09-22 Xinlei He , Yang Zhang

Among all privacy attacks against Machine Learning (ML), membership inference attacks (MIA) attracted the most attention. In these attacks, the attacker is given an ML model and a data point, and they must infer whether the data point was…

密码学与安全 · 计算机科学 2025-12-02 Bram van Dartel , Marc Damie , Florian Hahn

Model compression is crucial for minimizing memory storage and accelerating inference in deep learning (DL) models, including recent foundation models like large language models (LLMs). Users can access different compressed model versions…

密码学与安全 · 计算机科学 2025-07-24 Na Li , Yansong Gao , Hongsheng Hu , Boyu Kuang , Anmin Fu

Federated Learning (FL) offers a promising framework for collaboratively training machine learning models across decentralized genomic datasets without direct data sharing. While this approach preserves data locality, it remains susceptible…

密码学与安全 · 计算机科学 2025-05-13 Chetan Pathade , Shubham Patil

Analyzing time-series data that contains personal information, particularly in the medical field, presents serious privacy concerns. Sensitive health data from patients is often used to train machine learning models for diagnostics and…

机器学习 · 计算机科学 2024-09-24 Noam Koren , Abigail Goldsteen , Guy Amit , Ariel Farkash

In this evolving era of machine learning security, membership inference attacks have emerged as a potent threat to the confidentiality of sensitive data. In this attack, adversaries aim to determine whether a particular point was used…

机器学习 · 计算机科学 2024-06-21 Abhishek Sinha , Himanshi Tibrewal , Mansi Gupta , Nikhar Waghela , Shivank Garg

The use of personal data for training machine learning systems comes with a privacy threat and measuring the level of privacy of a model is one of the major challenges in machine learning today. Identifying training data based on a trained…

机器学习 · 计算机科学 2022-03-24 Ganesh Del Grosso , Hamid Jalalzai , Georg Pichler , Catuscia Palamidessi , Pablo Piantanida

One of the key advantages of Federated Learning (FL) is its ability to collaboratively train a Machine Learning (ML) model while keeping clients' data on-site. However, this can create a false sense of security. Despite not sharing private…

密码学与安全 · 计算机科学 2026-05-26 Vincenzo Carletti , Pasquale Foggia , Carlo Mazzocca , Giuseppe Parrella , Mario Vento

Membership Inference attacks (MIAs) aim to predict whether a data sample was present in the training data of a machine learning model or not, and are widely used for assessing the privacy risks of language models. Most existing attacks rely…

Federated Contrastive Learning (FCL) represents a burgeoning approach for learning from decentralized unlabeled data while upholding data privacy. In FCL, participant clients collaborate in learning a global encoder using unlabeled data,…

密码学与安全 · 计算机科学 2024-04-29 Kongyang Chen , Wenfeng Wang , Zixin Wang , Wangjun Zhang , Zhipeng Li , Yao Huang

Large language models (LLMs) have achieved remarkable success and are widely adopted for diverse applications. However, fine-tuning these models often involves private or sensitive information, raising critical privacy concerns. In this…

Gradient inversion attacks are an ubiquitous threat in federated learning as they exploit gradient leakage to reconstruct supposedly private training data. Recent work has proposed to prevent gradient leakage without loss of model utility…

机器学习 · 计算机科学 2024-10-28 Daniel Scheliga , Patrick Mäder , Marco Seeland

Traditional machine learning (ML) raises serious privacy concerns, while federated learning (FL) mitigates the risk of data leakage by keeping data on local devices. However, the training process of FL can still leak sensitive information,…

机器学习 · 计算机科学 2025-05-13 Heqing Ren , Chao Feng , Alberto Huertas , Burkhard Stiller

Differentially private training algorithms provide protection against one of the most popular attacks in machine learning: the membership inference attack. However, these privacy algorithms incur a loss of the model's classification…

密码学与安全 · 计算机科学 2021-10-13 Jiaxiang Liu , Simon Oya , Florian Kerschbaum

While being deployed in many critical applications as core components, machine learning (ML) models are vulnerable to various security and privacy attacks. One major privacy attack in this domain is membership inference, where an adversary…

密码学与安全 · 计算机科学 2020-09-11 Yang Zou , Zhikun Zhang , Michael Backes , Yang Zhang

Membership inference attacks (MIAs) aim to determine whether a specific data point was part of a model's training set, serving as effective tools for evaluating privacy leakage of vision models. However, existing MIAs implicitly assume…

计算机视觉与模式识别 · 计算机科学 2026-04-06 Ruize Gao , Kaiwen Zhou , Yongqiang Chen , Feng Liu