{"id":"https://openalex.org/W7125906595","doi":"https://doi.org/10.1109/ase63991.2025.00191","title":"Effective Code Membership Inference for Code Completion Models via Adversarial Prompts","display_name":"Effective Code Membership Inference for Code Completion Models via Adversarial Prompts","publication_year":2025,"publication_date":"2025-11-16","ids":{"openalex":"https://openalex.org/W7125906595","doi":"https://doi.org/10.1109/ase63991.2025.00191"},"language":null,"primary_location":{"id":"doi:10.1109/ase63991.2025.00191","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00191","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001115521","display_name":"Yuan Jiang","orcid":"https://orcid.org/0000-0002-3052-1320"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Jiang","raw_affiliation_strings":["Harbin Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109928701","display_name":"ZeHao Li","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zehao Li","raw_affiliation_strings":["Harbin Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086476779","display_name":"Shan Yun Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shan Huang","raw_affiliation_strings":["Harbin Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124110506","display_name":"Christoph Treude","orcid":null},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Christoph Treude","raw_affiliation_strings":["Singapore Management University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Management University","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121851437","display_name":"Xiaohong Su","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohong Su","raw_affiliation_strings":["Harbin Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124066742","display_name":"Tiantian Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Wang","raw_affiliation_strings":["Harbin Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.6255747,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2312","last_page":"2324"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.608299970626831,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.608299970626831,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.23759999871253967,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.032499998807907104,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6333000063896179},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6182000041007996},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5521000027656555},{"id":"https://openalex.org/keywords/snippet","display_name":"Snippet","score":0.5278000235557556},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5131000280380249},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.48989999294281006},{"id":"https://openalex.org/keywords/novelty","display_name":"Novelty","score":0.4449000060558319},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.4189000129699707}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7595999836921692},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6333000063896179},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6182000041007996},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5666999816894531},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.555400013923645},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5521000027656555},{"id":"https://openalex.org/C2777822670","wikidata":"https://www.wikidata.org/wiki/Q1120538","display_name":"Snippet","level":2,"score":0.5278000235557556},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5131000280380249},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.48989999294281006},{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.4449000060558319},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.4189000129699707},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.41659998893737793},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.39750000834465027},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.39579999446868896},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.36660000681877136},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.3637999892234802},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.3456999957561493},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3343999981880188},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32670000195503235},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.30959999561309814},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.2939000129699707},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ase63991.2025.00191","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00191","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8353071808815002,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320311687","display_name":"Ministry of Education","ror":"https://ror.org/03m01yf64"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2535690855","https://openalex.org/W2788848944","https://openalex.org/W3011159643","https://openalex.org/W3098605233","https://openalex.org/W3198685994","https://openalex.org/W3210860486","https://openalex.org/W4210772589","https://openalex.org/W4220722393","https://openalex.org/W4252326246","https://openalex.org/W4295646147","https://openalex.org/W4378977274","https://openalex.org/W4385570534","https://openalex.org/W4386272920","https://openalex.org/W4394744221","https://openalex.org/W4394745382","https://openalex.org/W4400582422","https://openalex.org/W4402897306","https://openalex.org/W4403761251","https://openalex.org/W4404002909","https://openalex.org/W4404132849","https://openalex.org/W4411337441","https://openalex.org/W4411644230","https://openalex.org/W4412887834","https://openalex.org/W4415427984"],"related_works":[],"abstract_inverted_index":{"Membership":[0],"inference":[1],"attacks":[2],"(MIAs)":[3],"on":[4,35,148],"code":[5,21,57,72,102],"completion":[6,73],"models":[7,38,189],"offer":[8],"an":[9],"effective":[10],"way":[11],"to":[12,48,117,133,178],"assess":[13],"privacy":[14],"risks":[15],"by":[16,55],"inferring":[17],"whether":[18],"a":[19,67,91,119],"given":[20],"snippet":[22],"was":[23],"part":[24],"of":[25,85,93,176],"the":[26,50,100,110,158],"training":[27,141],"data.":[28],"Existing":[29],"black-":[30],"and":[31,138,160,190,196],"gray-box":[32],"MIAs":[33],"rely":[34],"expensive":[36],"surrogate":[37],"or":[39],"manually":[40],"crafted":[41],"heuristic":[42],"rules,":[43],"which":[44],"limit":[45],"their":[46],"ability":[47],"capture":[49,134],"nuanced":[51],"memorization":[52,136],"patterns":[53,137],"exhibited":[54],"over-parameterized":[56],"language":[58],"models.":[59],"To":[60],"address":[61],"these":[62,107],"challenges,":[63],"we":[64,113],"propose":[65],"AdvPrompt-MIA,":[66],"method":[68,87,132,183],"specifically":[69],"designed":[70],"for":[71],"models,":[74,151],"combining":[75],"code-specific":[76],"adversarial":[77,94],"perturbations":[78],"with":[79,109,173],"deep":[80],"learning.":[81],"The":[82,163],"core":[83],"novelty":[84],"our":[86,131,167,182],"lies":[88],"in":[89,99],"designing":[90],"series":[92],"prompts":[95],"that":[96,121,166],"induce":[97],"variations":[98],"victim":[101],"model\u2019s":[103],"output.":[104],"By":[105],"comparing":[106],"outputs":[108],"ground-truth":[111],"completion,":[112],"construct":[114],"feature":[115],"vectors":[116],"train":[118],"classifier":[120],"automatically":[122],"distinguishes":[123],"member":[124],"from":[125],"non-member":[126],"samples.":[127],"This":[128],"design":[129],"allows":[130],"richer":[135],"accurately":[139],"infer":[140],"set":[142],"membership.":[143],"We":[144],"conduct":[145],"comprehensive":[146],"evaluations":[147],"widely":[149],"adopted":[150],"such":[152],"as":[153],"Code":[154],"Llama":[155],"7B,":[156],"over":[157],"APPS":[159],"HumanEval":[161],"benchmarks.":[162],"results":[164],"show":[165],"approach":[168],"consistently":[169],"outperforms":[170],"state-of-the-art":[171],"baselines,":[172],"AUC":[174],"gains":[175],"up":[177],"102%.":[179],"In":[180],"addition,":[181],"exhibits":[184],"strong":[185],"transferability":[186],"across":[187],"different":[188],"datasets,":[191],"underscoring":[192],"its":[193],"practical":[194],"utility":[195],"generalizability.":[197]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-01-29T00:00:00"}