{"id":"W4409882654","doi":"10.1109/tdsc.2025.3564697","title":"Poisoning as a Post-Protection: Mitigating Membership Privacy Leakage From Gradient and Prediction of Federated Models","year":2025,"lang":"en","type":"article","venue":"IEEE Transactions on Dependable and Secure Computing","topic":"HIV, Drug Use, Sexual Risk","field":"Medicine","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Simon Fraser University","funders":"National Natural Science Foundation of China","keywords":"Leakage (economics); Computer science; Computer security; Privacy protection; Information privacy; Internet privacy","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.006643897,0.0008213472,0.001381719,0.0006165833,0.001166081,0.002441747,0.003027504,0.002152022,0.001443096],"category_scores_gemma":[0.02700358,0.0006392953,0.001147167,0.0007832174,0.002002551,0.006481916,0.006142946,0.003463361,0.0006700385],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001520444,"about_ca_system_score_gemma":0.0024029,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001333635,"about_ca_topic_score_gemma":0.0009914223,"domain_scores_codex":[0.9929219,0.002629224,0.0004260335,0.00153733,0.001767302,0.0007182343],"domain_scores_gemma":[0.9781992,0.005615669,0.00161731,0.01280191,0.001302046,0.0004639197],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.002452276,0.0007096017,0.02481329,0.0002192367,0.0003375963,0.0009271825,0.001454976,0.4675483,0.03063695,0.1115582,0.009706542,0.3496359],"study_design_scores_gemma":[0.0000246584,0.00009056179,0.0006326752,0.00001603448,0.00001899269,0.0001495662,0.00004484968,0.9372401,0.02014709,0.04027262,0.001342829,0.00002008359],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.09958909,0.0001664584,0.8929306,0.001035382,0.00006421057,0.00007883654,0.0001902132,0.004172571,0.001772624],"genre_scores_gemma":[0.9210181,0.00005534475,0.07657725,0.0003531832,0.0000444218,0.00006175713,0.0001980583,0.0001494908,0.001542343],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.006643897,"threshold_uncertainty_score":0.0351367,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04057071849102817,"score_gpt":0.2899999680208071,"score_spread":0.2494292495297789,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}