models, as their implementation expands in scope. In membership inference attacks,
adversaries can determine whether a particular set of data was used in training, putting the
privacy of the data at risk. Existing work has mostly focused on image related tasks; we
generalize this type of attack to speaker identification on audio samples. We demonstrate
attack precision of 85.9\% and recall of 90.8\% for LibriSpeech, and 78.3\% precision and …