{"id":"https://openalex.org/W4300451640","doi":"https://doi.org/10.1145/3528535.3565240","title":"MixNN","display_name":"MixNN","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4300451640","doi":"https://doi.org/10.1145/3528535.3565240"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1145/3528535.3565240","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"preprint","type_crossref":"proceedings-article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://inria.hal.science/hal-03795818v1/file/MixNN%20%2849%29.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038473707","display_name":"Thomas Lebrun","orcid":null},"institutions":[{"id":"https://openalex.org/I100532134","display_name":"Universit\u00e9 Claude Bernard Lyon 1","ror":"https://ror.org/029brtt94","country_code":"FR","type":"education","lineage":["https://openalex.org/I100532134","https://openalex.org/I203339264"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Thomas Lebrun","raw_affiliation_strings":["Privacy Models, Architectures and Tools for the Information Society","Univ Lyon, Lyon, France"],"affiliations":[{"raw_affiliation_string":"Privacy Models, Architectures and Tools for the Information Society","institution_ids":[]},{"raw_affiliation_string":"Univ Lyon, Lyon, France","institution_ids":["https://openalex.org/I100532134"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108082107","display_name":"Antoine Boutet","orcid":null},"institutions":[{"id":"https://openalex.org/I100532134","display_name":"Universit\u00e9 Claude Bernard Lyon 1","ror":"https://ror.org/029brtt94","country_code":"FR","type":"education","lineage":["https://openalex.org/I100532134","https://openalex.org/I203339264"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Antoine Boutet","raw_affiliation_strings":["Privacy Models, Architectures and Tools for the Information Society","Univ Lyon, Lyon, France"],"affiliations":[{"raw_affiliation_string":"Privacy Models, Architectures and Tools for the Information Society","institution_ids":[]},{"raw_affiliation_string":"Univ Lyon, Lyon, France","institution_ids":["https://openalex.org/I100532134"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072587955","display_name":"Jan Aalmoes","orcid":null},"institutions":[{"id":"https://openalex.org/I100532134","display_name":"Universit\u00e9 Claude Bernard Lyon 1","ror":"https://ror.org/029brtt94","country_code":"FR","type":"education","lineage":["https://openalex.org/I100532134","https://openalex.org/I203339264"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Jan Aalmoes","raw_affiliation_strings":["Privacy Models, Architectures and Tools for the Information Society","Univ Lyon, Lyon, France"],"affiliations":[{"raw_affiliation_string":"Privacy Models, Architectures and Tools for the Information Society","institution_ids":[]},{"raw_affiliation_string":"Univ Lyon, Lyon, France","institution_ids":["https://openalex.org/I100532134"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041298625","display_name":"Adrien Baud","orcid":null},"institutions":[{"id":"https://openalex.org/I100532134","display_name":"Universit\u00e9 Claude Bernard Lyon 1","ror":"https://ror.org/029brtt94","country_code":"FR","type":"education","lineage":["https://openalex.org/I100532134","https://openalex.org/I203339264"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Adrien Baud","raw_affiliation_strings":["Privacy Models, Architectures and Tools for the Information Society","Univ Lyon, Lyon, France"],"affiliations":[{"raw_affiliation_string":"Privacy Models, Architectures and Tools for the Information Society","institution_ids":[]},{"raw_affiliation_string":"Univ Lyon, Lyon, France","institution_ids":["https://openalex.org/I100532134"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"fulltext_origin":"pdf","cited_by_count":6,"citation_normalized_percentile":{"value":0.999939,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":85,"max":87},"biblio":{"volume":null,"issue":null,"first_page":"135","last_page":"147"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9936,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness","score":0.643136},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated Learning","score":0.46058744},{"id":"https://openalex.org/keywords/proxy","display_name":"Proxy (statistics)","score":0.41587153}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8658993},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.643136},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5423809},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5095539},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49869704},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.46058744},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.41587153},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3640471},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33354753},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1145/3528535.3565240","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},{"is_oa":true,"landing_page_url":"https://hal.inria.fr/hal-03795818","pdf_url":"https://inria.hal.science/hal-03795818v1/file/MixNN%20%2849%29.pdf","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":["Centre National de la Recherche Scientifique"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false},{"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2109.12550","pdf_url":"https://arxiv.org/pdf/2109.12550","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":["Cornell University"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false},{"is_oa":true,"landing_page_url":"https://hal.inria.fr/hal-03354724","pdf_url":"https://inria.hal.science/hal-03354724/document","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":["Centre National de la Recherche Scientifique"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false},{"is_oa":false,"landing_page_url":"https://api.datacite.org/dois/10.48550/arxiv.2109.12550","pdf_url":null,"source":{"id":"https://openalex.org/S4393179698","display_name":"DataCite API","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210145204","host_organization_name":"DataCite","host_organization_lineage":["https://openalex.org/I4210145204"],"host_organization_lineage_names":["DataCite"],"type":"metadata"},"license":null,"license_id":null,"version":null}],"best_oa_location":{"is_oa":true,"landing_page_url":"https://hal.inria.fr/hal-03795818","pdf_url":"https://inria.hal.science/hal-03795818v1/file/MixNN%20%2849%29.pdf","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":["Centre National de la Recherche Scientifique"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.75,"display_name":"Peace, justice, and strong institutions"}],"grants":[{"funder":"https://openalex.org/F4320311618","funder_display_name":"FACE Foundation","award_id":null}],"datasets":[],"versions":[],"referenced_works_count":19,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W2103647628","https://openalex.org/W2145287260","https://openalex.org/W2150248082","https://openalex.org/W2211872228","https://openalex.org/W2387306914","https://openalex.org/W2473418344","https://openalex.org/W2484015479","https://openalex.org/W2568218703","https://openalex.org/W2767079719","https://openalex.org/W2793957616","https://openalex.org/W2897830718","https://openalex.org/W2950656546","https://openalex.org/W3096328345","https://openalex.org/W3103245149","https://openalex.org/W3165040079","https://openalex.org/W3176786489","https://openalex.org/W4251569035","https://openalex.org/W4385241475"],"related_works":["https://openalex.org/W4396872084","https://openalex.org/W4378677776","https://openalex.org/W4312762663","https://openalex.org/W4298221930","https://openalex.org/W4287823391","https://openalex.org/W4280588203","https://openalex.org/W4249498729","https://openalex.org/W3013363440","https://openalex.org/W2777914285","https://openalex.org/W2028495302"],"abstract_inverted_index":{"Machine":[0,19],"Learning":[1,20],"(ML)":[2],"has":[3,130],"emerged":[4],"as":[5,21,171,213],"a":[6,22,60,74,192],"core":[7],"technology":[8],"to":[9,13,67,81,107,161,191,202],"provide":[10],"learning":[11,66],"models":[12,38],"perform":[14],"complex":[15],"tasks.":[16],"Boosted":[17],"by":[18,143],"Service":[23],"(MLaaS),":[24],"the":[25,40,69,92,104,108,125,128,134,137,140,144,173,176,185,204,208],"number":[26],"of":[27,42,71,127,136,139,152,175,211],"applications":[28],"relying":[29],"on":[30,133,148],"ML":[31,37],"capabilities":[32],"is":[33],"ever":[34],"increasing.":[35],"However,":[36],"are":[39],"source":[41],"different":[43,52],"privacy":[44,70,116,163],"violations":[45],"through":[46,165],"passive":[47],"or":[48,76],"active":[49],"attacks":[50,170],"from":[51,95],"entities.":[53],"In":[54],"this":[55],"paper,":[56],"we":[57],"present":[58],"MixNN":[59,90,153,181],"proxy-based":[61],"privacy-preserving":[62],"system":[63],"for":[64],"federated":[65,215],"protect":[68],"participants":[72,96,101],"against":[73],"curious":[75],"malicious":[77],"aggregation":[78,109,138],"server":[79],"trying":[80],"infer":[82],"sensitive":[83],"information":[84],"(i.e.,":[85],"membership":[86,166,186],"and":[87,97,157,167,187,197],"attribute":[88,168,188],"inferences).":[89],"receives":[91],"model":[93,129,195],"updates":[94,106,126,141],"mixes":[98],"layers":[99],"between":[100],"before":[102],"sending":[103],"mixed":[105],"server.":[110,145],"This":[111],"mixing":[112,124],"strategy":[113],"drastically":[114],"reduces":[115],"leaks":[117],"without":[118],"any":[119],"trade-off":[120],"with":[121],"utility.":[122],"Indeed,":[123],"no":[131],"impact":[132],"result":[135],"computed":[142],"We":[146,178],"report":[147],"an":[149],"extensive":[150],"evaluation":[151],"using":[154,194],"several":[155],"datasets":[156],"neural":[158],"networks":[159],"architectures":[160],"quantify":[162],"leakage":[164],"inference":[169],"well":[172],"robustness":[174],"protection.":[177],"show":[179],"that":[180],"significantly":[182],"limits":[183],"both":[184],"inferences":[189],"compared":[190],"baseline":[193],"compression":[196],"noisy":[198],"gradient":[199],"(well":[200],"known":[201],"damage":[203],"utility)":[205],"while":[206],"keeping":[207],"same":[209],"level":[210],"utility":[212],"classic":[214],"learning.":[216]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W4300451640","counts_by_year":[{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2025-01-03T06:53:26.847837","created_date":"2022-10-03"}