{"id":"W4399119669","doi":"10.1109/trustcom60117.2023.00033","title":"Reducing Model Memorization to Mitigate Membership Inference Attacks","year":2023,"lang":"en","type":"article","venue":"","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Windsor","funders":"","keywords":"Computer science; Inference; Memorization; Machine learning; Artificial intelligence; Norm (philosophy); Random forest; Entropy (arrow of time); Jacobian matrix and determinant; Data mining; Mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00481898,0.001183031,0.001299581,0.0009214003,0.001120994,0.001864379,0.003307052,0.001476993,0.002838314],"category_scores_gemma":[0.03430244,0.0006576051,0.001200913,0.0008356221,0.002134637,0.009902102,0.007506385,0.005190781,0.0008307501],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001083523,"about_ca_system_score_gemma":0.001884311,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001086474,"about_ca_topic_score_gemma":0.001580683,"domain_scores_codex":[0.9950215,0.001883254,0.0002766252,0.0008700956,0.001407672,0.0005409942],"domain_scores_gemma":[0.9687091,0.01177664,0.00150286,0.01633824,0.001143641,0.0005295818],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.002137714,0.0009627581,0.008541153,0.0004334168,0.0004131304,0.0005281978,0.001323231,0.3366499,0.0461016,0.145647,0.01801809,0.4392439],"study_design_scores_gemma":[0.00007767226,0.000289313,0.0008094627,0.00003602099,0.00005991707,0.0003436909,0.0001547195,0.8750219,0.0320861,0.08732613,0.003749025,0.00004612461],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.180732,0.001027397,0.8041285,0.002551124,0.000233996,0.0002077396,0.0003777326,0.005463076,0.005278558],"genre_scores_gemma":[0.9340584,0.0001834068,0.06256831,0.0004438875,0.0001503018,0.0001067514,0.0003041052,0.0002085873,0.001976197],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.00481898,"threshold_uncertainty_score":0.02548546,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.08382160788968371,"score_gpt":0.3303197517092094,"score_spread":0.2464981438195256,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}