{"id":"W4387665628","doi":"10.1109/tifs.2023.3324772","title":"Gradient-Leaks: Enabling Black-Box Membership Inference Attacks Against Machine Learning Models","year":2023,"lang":"en","type":"article","venue":"IEEE Transactions on Information Forensics and Security","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":22,"is_retracted":false,"has_abstract":true,"ca_institutions":"Simon Fraser University","funders":"National Natural Science Foundation of China","keywords":"Computer science; Inference; Black box; Construct (python library); Artificial intelligence; Autoencoder; Machine learning; A priori and a posteriori; Key (lock); Data mining; Data modeling; Deep learning; Computer security; Database","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004444059,0.0008750524,0.001109635,0.0007184161,0.0007895785,0.001901592,0.00183202,0.00214518,0.001649064],"category_scores_gemma":[0.0286423,0.0005741075,0.0008892743,0.0006681118,0.002673244,0.00641869,0.006866002,0.003734875,0.0006529229],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008396567,"about_ca_system_score_gemma":0.001123604,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0007983426,"about_ca_topic_score_gemma":0.0006202242,"domain_scores_codex":[0.9941046,0.002133755,0.0003503567,0.0008077326,0.002098245,0.0005053674],"domain_scores_gemma":[0.9864746,0.005715293,0.0011304,0.005739192,0.0006591839,0.0002815019],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001655743,0.0004174612,0.01072148,0.000406948,0.0003785793,0.001066066,0.001601912,0.3753938,0.04427692,0.2432091,0.01255367,0.3083183],"study_design_scores_gemma":[0.00003211516,0.0001052094,0.0004588766,0.00003251222,0.000021095,0.0002572985,0.00006296639,0.8891024,0.020937,0.08646359,0.002489202,0.00003780832],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.07272583,0.0004813084,0.9180012,0.00113553,0.0001054696,0.0001061784,0.0002008804,0.005084701,0.002158865],"genre_scores_gemma":[0.9277846,0.00016894,0.0697095,0.0004730489,0.00006677777,0.00007108402,0.0001662007,0.0002631661,0.001296688],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.004444059,"threshold_uncertainty_score":0.02350271,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04243754355375758,"score_gpt":0.2615634286284281,"score_spread":0.2191258850746706,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}