Related Work

Blogs

• Madry Lab blog
• Cleverhans blog

Membership Inference

• Shokri, Reza, Marco Stronati, Congzheng Song, and Vitaly Shmatikov. "Membership inference attacks against machine learning models." In Security and Privacy (SP), 2017 IEEE Symposium on, pp. 3-18. IEEE, 2017.
• Salem, Ahmed, Yang Zhang, Mathias Humbert, Mario Fritz, and Michael Backes. "ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models." arXiv preprint arXiv:1806.01246 (2018).
• Nasr, Milad, Reza Shokri, and Amir Houmansadr. "Machine Learning with Membership Privacy using Adversarial Regularization." arXiv preprint arXiv:1807.05852 (2018).
• Melis, Luca, Congzheng Song, Emiliano De Cristofaro, and Vitaly Shmatikov. "Inference Attacks Against Collaborative Learning." arXiv preprint arXiv:1805.04049 (2018).

Model Inversion

• Fredrikson, Matt, Somesh Jha, and Thomas Ristenpart. "Model inversion attacks that exploit confidence information and basic countermeasures." Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. ACM, 2015.

Model Leakage

• Song, Congzheng, Thomas Ristenpart, and Vitaly Shmatikov. "Machine learning models that remember too much." Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017.

Model Fooling

• Madry, Aleksander, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. "Towards deep learning models resistant to adversarial attacks." arXiv preprint arXiv:1706.06083 (2017).
• Tramèr, Florian, Alexey Kurakin, Nicolas Papernot, Ian Goodfellow, Dan Boneh, and Patrick McDaniel. "Ensemble adversarial training: Attacks and defenses." arXiv preprint arXiv:1705.07204 (2017).
• Kurakin, Alexey, Ian Goodfellow, Samy Bengio, Yinpeng Dong, Fangzhou Liao, Ming Liang, Tianyu Pang et al. "Adversarial attacks and defences competition." arXiv preprint arXiv:1804.00097 (2018).
• Goodfellow, Ian J., Jonathon Shlens, and Christian Szegedy. "Explaining And Harnessing Adversarial Examples". axXiv preprint arXiv:1412.6572 (2015).
• Tramèr, Florian, Nicolas Papernot, Ian Goodfellow, Dan Boneh, and Patrick McDaniel. "The space of transferable adversarial examples." arXiv preprint arXiv:1704.03453 (2017).
• Athalye, Anish, Nicholas Carlini, and David Wagner. "Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples." arXiv preprint arXiv:1802.00420 (2018).

Physical Perturbations

• Athalye, Anish, Logan Engstrom, Andrew Ilyas, and Kevin Kwok. "Synthesizing Robust Adversarial Examples." arXiv preprint arXiv:1707:07397 (2018).

Bio

• Mittos, Alexandros, Bradley Malin, and Emiliano De Cristofaro. "Systematizing Genome Privacy Research: A Privacy-Enhancing Technologies Perspective." Proceedings on Privacy Enhancing Technologies (PoPETs) 2019 (2019).
• Wan, Shibiao, Man-Wai Mak, and Sun-Yuan Kung. "Protecting Genomic Privacy by a Sequence-Similarity Based Obfuscation Method." arXiv preprint arXiv:1708.02629 (2017).
• Pascal Berrang, Mathias Humbert, Yang Zhang, Irina Lehmann, Roland Eils, Michael Backes. Dissecting Privacy Risks in Biomedical Data. In Proceedings of the 3rd IEEE European Symposium on Security and Privacy (EuroS&P), 2018.
• Erman Ayday, Mathias Humbert. Inference Attacks against Kin Genomic Privacy. IEEE Security & Privacy, vol. 15, no 5, pp. 29-37, 2017.
• Michael Backes, Pascal Berrang, Matthias Bieg, Roland Eils, Carl Herrmann, Mathias Humbert, Irina Lehmann. Identifying Personal DNA Methylation Profiles by Genotype Inference. In Proceedings of the 38th IEEE Symposium on Security and Privacy (S&P), 2017.
• Mathias Humbert, Erman Ayday, Jean-Pierre Hubaux, Amalio Telenti. Quantifying Interdependent Risks in Genomic Privacy. ACM Transactions on Privacy and Security (TOPS), vol. 20, no 1, pp. 1-31, 2017.
• Michael Backes, Pascal Berrang, Mathias Humbert, Xiaoyu Shen, Verena Wolf. Simulating the Large-scale Erosion of Genomic Privacy Over Time. 3rd International Workshop on Genome Privacy and Security (GenoPri), 2016. Selected for publication in IEEE/ACM Transactions on Computational Biology and Bioinformatics.
• Michael Backes, Pascal Berrang, Mathias Humbert, Praveen Manoharan. Membership Privacy in MicroRNA-based Studies. In Proceedings of the 23rd ACM SIGSAC Conference on Computer and Communications Security (CCS), 2016.