<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE ArticleSet PUBLIC "-//NLM//DTD PubMed 2.7//EN" "https://dtd.nlm.nih.gov/ncbi/pubmed/in/PubMed.dtd">
<ArticleSet>
<Article>
<Journal>
				<PublisherName>Iranian Society of Cryptology</PublisherName>
				<JournalTitle>The ISC International Journal of Information Security</JournalTitle>
				<Issn>2008-2045</Issn>
				<Volume>17</Volume>
				<Issue>2</Issue>
				<PubDate PubStatus="epublish">
					<Year>2025</Year>
					<Month>07</Month>
					<Day>01</Day>
				</PubDate>
			</Journal>
<ArticleTitle>A Fine-Grained Hybrid Inversion-Based Membership Inference Attack Against GANs</ArticleTitle>
<VernacularTitle></VernacularTitle>
			<FirstPage>189</FirstPage>
			<LastPage>198</LastPage>
			<ELocationID EIdType="pii">216445</ELocationID>
			
<ELocationID EIdType="doi">10.22042/isecure.2025.216445</ELocationID>
			
			<Language>EN</Language>
<AuthorList>
<Author>
					<FirstName>Maryam</FirstName>
					<LastName>Azadmanesh</LastName>
<Affiliation>Faculty of Electrical and Computer Engineering, University of Birjand, Birjand, Iran</Affiliation>

</Author>
</AuthorList>
				<PublicationType>Journal Article</PublicationType>
			<History>
				<PubDate PubStatus="received">
					<Year>2025</Year>
					<Month>03</Month>
					<Day>01</Day>
				</PubDate>
			</History>
		<Abstract>Generative Adversarial Networks (GANs) are commonly used in various applications. Different membership inference attacks have been carried out against GANs. However, the accuracy of these attacks decreases with a large number of training samples, and there have been no attacks conducted against privacy-preserving GAN models with dependent or independent datasets. Therefore, this paper proposes a fine-grained inversion-based attack. In this proposed attack, fine-grained reconstruction error is utilized to infer the membership or non-membership of given samples. To calculate the&lt;br /&gt;reconstruction error, an inversion-based encoder is trained, and the latent code obtained from the encoder is refined using a Genetic Algorithm. The membership status of the candidate target sample is determined using the reconstruction error of the segmentations of the target sample. The proposed attack can be executed by accessing the generator network in both black and white-box settings. The accuracy of the proposed attack is compared with other relevant studies, demonstrating its superior performance. Furthermore, the results indicate that privacy-preserving mechanisms do not ensure that dependent data does not disclose information about individual samples.</Abstract>
		<ObjectList>
			<Object Type="keyword">
			<Param Name="value">Membership Inference Attack</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Generative adversarial network</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Privacy</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Inversion methods</Param>
			</Object>
		</ObjectList>
<ArchiveCopySource DocType="pdf">https://www.isecure-journal.com/article_216445_e3b68d7b0aa352c64c822a3b311095c0.pdf</ArchiveCopySource>
</Article>
</ArticleSet>
