Evidence map›Paper›PMID 41551373›Full record

ArticleIEEE transactions on privacy2025

Privacy-Preserving Verification of ML Preprocessing via Model Behavior Indicators.

Wenbiao Li, Anisa Halimi, Jaideep Vaidya, Xiaoqian Jiang, Erman Ayday

Abstract read
In one paragraph

Article in IEEE transactions on privacy, 2025. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 1 paper.

0numbers the graph read from it
0cells of the map it votes in
1citing papers in PubMed
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

1 citing paper in PubMed.

  1. Article
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

5 authors.

Wenbiao LiCase Western Reserve University, Cleveland, OH 44106 USA.ORCID 0009-0003-7651-696X
Anisa HalimiIBM Research Europe, D15 HN66 Dublin, Ireland.ORCID 0009-0005-6956-0908
Jaideep VaidyaRutgers University, Newark, NJ 07102-1811 USA.ORCID 0000-0002-7420-6947
Xiaoqian JiangUTHealth, Houston, TX 77030 USA.ORCID 0000-0001-9933-2205
Erman AydayCase Western Reserve University, Cleveland, OH 44106 USA.

Funding

AIM-AI: an Actionable, Integrated and Multiscale genetic map of Alzheimer's disease via deep learningU01AG079847 · NIA · UNIVERSITY OF TEXAS HLTH SCI CTR HOUSTON · PI Christopher A. Gaiteri, Xiaoqian Jiang · 2023 to 2026
$5.1M
Finding Combinatorial Drug Repositioning Therapy For Alzheimer'S Disease And Related DementiasR01AG066749 · NIA · UNIVERSITY OF TEXAS HLTH SCI CTR HOUSTON · PI JIANG, XIAOQIAN, ZHENG, WENJIN JIM · 2020 to 2024
$4.4M
Accelerating Genomic Data Sharing and Collaborative Research with Privacy ProtectionR01LM014520 · NLM · CASE WESTERN RESERVE UNIVERSITY · PI Erman Ayday, Xiaoqian Jiang · 2023 to 2026
$2.6M
Decentralized differentially-private methods for dynamic data release and analysisR01LM013712 · NLM · YALE UNIVERSITY · PI JIANG, XIAOQIAN, OHNO-MACHADO, LUCILA · 2022 to 2025
$2.5M
Supplement for high performance compute clustersR35GM134927 · NIGMS · RUTGERS THE STATE UNIV OF NJ NEWARK · PI VAIDYA, JAIDEEP · 2020 to 2024
$2.1M
Harmonizing multiple clinical trials for Alzheimer's disease to investigate differential responses to treatment via federated counterfactual learningR01AG082721 · NIA · UNIVERSITY OF TEXAS HLTH SCI CTR HOUSTON · PI Xiaoqian Jiang, Yejin Kim · 2023 to 2026
$2.0M
Robust privacy preserving distributed analysis platform for cancer research: addressing data bias and disparitiesU01CA274576 · NCI · UNIVERSITY OF PENNSYLVANIA · PI JIANG, XIAOQIAN, LONG, QI · 2023 to 2025
$1.2M
NCI NIH HHS U01 CA274576NIA NIH HHS R01 AG066749NIA NIH HHS R01 AG082721NIA NIH HHS U01 AG079847NIGMS NIH HHS R35 GM134927NLM NIH HHS R01 LM013712NLM NIH HHS R01 LM014520
6 · The paper itself

Abstract

We present a privacy-preserving framework to verify whether a declared data preprocessing pipeline was correctly applied before training a machine learning model on sensitive data. The verifier has only black-box query access to the model and combines three behavior indicators: shift in prediction accuracy, Kullback-Leibler (KL) divergence between output distributions, and explanation vectors from Local Interpretable Model-agnostic Explanations (LIME) and SHapley Additive exPlanations (SHAP). The method requires neither the original training records nor ground-truth labels. It supports two tasks: (i) a binary decision on correctness and (ii) a multi-class diagnosis identifying which step is missing. Experiments on three tabular datasets (Diabetes, Adult-Income, Student-Record) show that the binary detector maintains over 75% F1 even under strong local differential privacy (

Indexed as

Data preprocessingdifferential privacyexplainable AIlocal differential privacymodel auditingtabular data

Identifiers

PMID41551373
PMCPMC12807549

What OpenQuestion holds

Textmetadata
LicenceCC BY
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.