<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="en">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">13</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/en1z-upfz-u3p7</article-id>
      <title-group>
        <article-title>Protection of the machine learning models from the training data membership inference</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Защита моделей машинного обучения от извлечения обучающего набора данных</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Muryleva</surname>
            <given-names>Anastasia</given-names>
          </name>
          <email>muryleva.aa@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-9732-0099</contrib-id>
          <name>
            <surname>Kalinin</surname>
            <given-names>Maxim</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>max@ibks.spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0003-2849-4682</contrib-id>
          <name>
            <surname>Lavrova</surname>
            <given-names>Daria</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>lavrova_ds@spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2024-03-25">
        <day>25</day>
        <month>03</month>
        <year>2024</year>
      </pub-date>
      <issue>1</issue>
      <fpage>142</fpage>
      <lpage>152</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/soderzhaniya/2024_1_contents_en.pdf"/>
      <abstract xml:lang="en">
        <p>The paper reviews the problem of protecting machine learning models from the security threat of violating data confidentiality, which implements membership inference in the training datasets. A method for protective noising of the training dataset is proposed. It has been experimentally shown that Gaussian noising of training dataset with scale of 0.2 is the simplest and most effective approach to protect machine learning models from the training data extraction. Compared to alternative techniques, the proposed method is easy to implement, universal for different types of target models, and allows reducing the effectiveness of attack by up to 26 % points.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>noising</kwd>
        <kwd>machine learning</kwd>
        <kwd>training set</kwd>
        <kwd>membership inference</kwd>
        <kwd>Gaussian noise</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
