To trust or not to trust prediction scores for membership inference attacks

D Hintersdorf, L Struppek, K Kersting - arXiv preprint arXiv:2111.09076, 2021 - arxiv.org
Membership inference attacks (MIAs) aim to determine whether a specific sample was used
to train a predictive model. Knowing this may indeed lead to a privacy breach. Most MIAs …

Mitigating Membership Inference Attacks via Weighted Smoothing

M Tan, X Xie, J Sun, T Wang - Proceedings of the 39th Annual Computer …, 2023 - dl.acm.org
Recent advancements in deep learning have spotlighted a crucial privacy vulnerability to
membership inference attack (MIA), where adversaries can determine if specific data was …

Quantifying membership inference vulnerability via generalization gap and other model metrics

JW Bentley, D Gibney, G Hoppenworth… - arXiv preprint arXiv …, 2020 - arxiv.org
We demonstrate how a target model's generalization gap leads directly to an effective
deterministic black box membership inference attack (MIA). This provides an upper bound …

A pragmatic approach to membership inferences on machine learning models

Y Long, L Wang, D Bu, V Bindschaedler… - 2020 IEEE European …, 2020 - ieeexplore.ieee.org
Membership Inference Attacks (MIAs) aim to determine the presence of a record in a
machine learning model's training data by querying the model. Recent work has …

Data and model dependencies of membership inference attack

SM Tonni, D Vatsalan, F Farokhi, D Kaafar, Z Lu… - arXiv preprint arXiv …, 2020 - arxiv.org
Machine learning (ML) models have been shown to be vulnerable to Membership Inference
Attacks (MIA), which infer the membership of a given data point in the target dataset by …

Ganmia: Gan-based black-box membership inference attack

Y Bai, D Chen, T Chen, M Fan - ICC 2021-IEEE International …, 2021 - ieeexplore.ieee.org
Membership inference attacks (MIAs) against machine learning systems have drawn
tremendous attention from information security researchers. By MIA, an adversary can …

Mixup training for generative models to defend membership inference attacks

Z Ji, Q Hu, L Xiang, C Zhou - IEEE INFOCOM 2023-IEEE …, 2023 - ieeexplore.ieee.org
With the popularity of machine learning, it has been a growing concern on the trained model
revealing the private information of the training data. Membership inference attack (MIA) …

On the importance of difficulty calibration in membership inference attacks

L Watson, C Guo, G Cormode… - arXiv preprint arXiv …, 2021 - arxiv.org
The vulnerability of machine learning models to membership inference attacks has received
much attention in recent years. However, existing attacks mostly remain impractical due to …

Dissecting membership inference risk in machine learning

N Senavirathne, V Torra - … 13th International Symposium, CSS 2021, Virtual …, 2022 - Springer
Membership inference attacks (MIA) have been identified as a distinct threat to privacy when
sensitive personal data are used to train the machine learning (ML) models. This work is …

Effects of differential privacy and data skewness on membership inference vulnerability

S Truex, L Liu, ME Gursoy, W Wei… - 2019 First IEEE …, 2019 - ieeexplore.ieee.org
Membership inference attacks seek to infer the membership of individual training instances
of a privately trained model. This paper presents a membership privacy analysis and …