{"id":"W4387665628","doi":"10.1109/tifs.2023.3324772","title":"Gradient-Leaks: Enabling Black-Box Membership Inference Attacks Against Machine Learning Models","year":2023,"lang":"en","type":"article","venue":"IEEE Transactions on Information Forensics and Security","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":22,"is_retracted":false,"has_abstract":true,"ca_institutions":"Simon Fraser University","funders":"National Natural Science Foundation of China","keywords":"Computer science; Inference; Black box; Construct (python library); Artificial intelligence; Autoencoder; Machine learning; A priori and a posteriori; Key (lock); Data mining; Data modeling; Deep learning; Computer security; Database","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000520813,0.0002208541,0.0001974246,0.0004970266,0.0005026329,0.0003833946,0.002728874,0.0001752478,0.00000779267],"category_scores_gemma":[0.0004734838,0.0002197308,0.00007578856,0.001018127,0.0001520187,0.003846389,0.0004782402,0.0007037609,0.0000867061],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00007059413,"about_ca_system_score_gemma":0.0000457549,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00005910557,"about_ca_topic_score_gemma":0.00004542413,"domain_scores_codex":[0.998435,0.00005135766,0.0004244667,0.0002887959,0.000402484,0.0003979021],"domain_scores_gemma":[0.9977107,0.0002150303,0.0001623951,0.001647119,0.0001515547,0.0001131849],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00008006954,0.0001369009,0.0001980075,0.000475374,0.0002050532,0.00002158466,0.02172361,0.4305405,0.00009809108,0.08667614,0.01497226,0.4448724],"study_design_scores_gemma":[0.000294782,0.00005749989,0.00001227239,0.0000418569,0.000006795025,0.000004137898,0.0002744404,0.8672671,0.001417642,0.1286225,0.001784359,0.0002166203],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.03392645,0.00001878559,0.9602377,0.002407031,0.000437191,0.0002105676,0.00008567215,0.001447701,0.001228911],"genre_scores_gemma":[0.9879678,0.0008329857,0.01079971,0.0002600711,0.000011649,0.00002306638,0.00007493577,0.000009877183,0.00001986916],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9540414,"threshold_uncertainty_score":0.8960361,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04243754355375758,"score_gpt":0.2615634286284281,"score_spread":0.2191258850746706,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}