@inproceedings {287198,
	author = {Boyang Zhang and Xinlei He and Yun Shen and Tianhao Wang and Yang Zhang},
	title = {A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {5289--5306},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-boyang},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {277098,
	author = {Yugeng Liu and Rui Wen and Xinlei He and Ahmed Salem and Zhikun Zhang and Michael Backes and Emiliano De Cristofaro and Mario Fritz and Yang Zhang},
	title = {{ML-Doctor}: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {4525--4542},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/liu-yugeng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {263820,
	author = {Xinlei He and Jinyuan Jia and Michael Backes and Neil Zhenqiang Gong and Yang Zhang},
	title = {Stealing Links from Graph Neural Networks},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {2669--2686},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/he-xinlei},
	publisher = {USENIX Association},
	month = aug
}
