Model Complexity as a Mitigation Strategy Against Industrial Espionage through Membership Inference Attacks

Machine learning (ML) models, particularly in the context of Federated Learning (FL), are increasingly used to enable predictive maintenance in smart industry. However, as these models become integral to industrial operations, they also become potential targets for data leakage and membership inference attacks (MIAs). In this paper, we hypothesise that training on multi-dimensional data (i.e., multiple features instead of a single feature) enhances resilience against MIAs compared to simpler, single-feature models. To test this hypothesis, we design an experimental testbed to empirically evaluate the vulnerability of ML models to black-box MIAs. Our approach involves training models of varying complexity on industrial time-series data and measuring their vulnerability to MIAs. Additionally, we introduce a human expert’s perspective to contextualise our findings in the realm of industrial espionage, emphasising the real-world implications of data leakage risks. Our results provide insights into the trade-offs between security, model complexity, and computational cost, offering practical guidance for practitioners seeking to deploy FL-based predictive maintenance solutions while minimising privacy risks.

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-07-11
DOI
https://doi.org/10.5281/zenodo.15862868
Primary Topic
Smart Grid Security and Resilience
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Model Complexity as a Mitigation Strategy Against Industrial Espionage through Membership Inference Attacks

Zenodo (CERN European Organization for Nuclear Research)
Smart Grid Security and Resilience
article

Model Complexity as a Mitigation Strategy Against Industrial Espionage through Membership Inference Attacks

article en

Abstract

Machine learning (ML) models, particularly in the context of Federated Learning (FL), are increasingly used to enable predictive maintenance in smart industry. However, as these models become integral to industrial operations, they also become potential targets for data leakage and membership inference attacks (MIAs). In this paper, we hypothesise that training on multi-dimensional data (i.e., multiple features instead of a single feature) enhances resilience against MIAs compared to simpler, single-feature models. To test this hypothesis, we design an experimental testbed to empirically evaluate the vulnerability of ML models to black-box MIAs. Our approach involves training models of varying complexity on industrial time-series data and measuring their vulnerability to MIAs. Additionally, we introduce a human expert’s perspective to contextualise our findings in the realm of industrial espionage, emphasising the real-world implications of data leakage risks. Our results provide insights into the trade-offs between security, model complexity, and computational cost, offering practical guidance for practitioners seeking to deploy FL-based predictive maintenance solutions while minimising privacy risks.

Zenodo (CERN European Organization for Nuclear Research)
Ericsson (Sweden) (SE), SINTEF (NO), Ludwig Boltzmann Gesellschaft (AT)
Industry, innovation and infrastructure
Openalex Percentile: Top 47%
Smart Grid Security and Resilience
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Model Complexity as a Mitigation Strategy Against Industrial Espionage through Membership Inference Attacks · Zenodo (CERN European Organization for Nuclear Research) (2025) | TGRS Research Map | TGRS