Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ ZENODOarrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Software . 2026
Data sources: ZENODO
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Software . 2026
Data sources: ZENODO
ZENODO
Software . 2026
Data sources: Datacite
ZENODO
Software . 2026
Data sources: Datacite
ZENODO
Software . 2026
Data sources: Datacite
versions View all 3 versions
addClaim

Artifact: SoK: Colluding Adversaries in Machine Learning Pipelines

Authors: Duddu, Vasisht; Waheed, Asim; He, Lipeng; Asokan, N.;

Artifact: SoK: Colluding Adversaries in Machine Learning Pipelines

Abstract

USENIX Security 2026 artifact for the paper SoK: Colluding Adversaries in Machine Learning Pipelines. Reproduces three empirical studies on unintended interactions between independent attacks against machine-learning models: Part A (paper §5.2, Table 5): data-poisoning vs. model extraction on CIFAR-10/100 — negative collusion. Part B (paper §5.3, Table 6): model extraction vs. distribution inference on CelebA/UTKFace — positive collusion. Part C (paper §5.4): data reconstruction (Geiping NeurIPS 2020 gradient inversion) vs. membership, attribute, and distribution inference on CIFAR-10 and CelebA/UTKFace — positive collusion. Targets all three USENIX Security 2026 badges (Artifacts Available, Functional, Results Reproducible). Single locked Python environment (pyproject.toml + uv.lock) pinning amuletml==0.5.1. One setup.sh covers all three parts; each part ships a smoke test (~3-10 min) and a full reproduction script. See README.md for claims, requirements, time budgets, and reference numbers.

Related Organizations
Keywords

machine learning security, systematization of knowledge, data poisoning, colluding adversaries, USENIX Security 2026, attribute inference, model extraction, distribution inference, data reconstruction, membership inference

  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    0
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
0
Average
Average
Average