中文
相关论文

相关论文: Hyperparameters in Score-Based Membership Inferenc…

200 篇论文

Deep learning models often raise privacy concerns as they leak information about their training data. This enables an adversary to determine whether a data point was in a model's training set by conducting a membership inference attack…

机器学习 · 计算机科学 2020-06-11 Yigitcan Kaya , Sanghyun Hong , Tudor Dumitras

Membership inference attack (MIA) has become one of the most widely used and effective methods for evaluating the privacy risks of machine learning models. These attacks aim to determine whether a specific sample is part of the model's…

密码学与安全 · 计算机科学 2025-06-04 Jing Xue , Zhishen Sun , Haishan Ye , Luo Luo , Xiangyu Chang , Ivor Tsang , Guang Dai

The high cost of model training makes it increasingly desirable to develop techniques for unlearning. These techniques seek to remove the influence of a training example without having to retrain the model from scratch. Intuitively, once a…

机器学习 · 计算机科学 2024-05-22 Jamie Hayes , Ilia Shumailov , Eleni Triantafillou , Amr Khalifa , Nicolas Papernot

The state-of-the-art for membership inference attacks on machine learning models is a class of attacks based on shadow models that mimic the behavior of the target model on subsets of held-out nonmember data. However, we find that this…

机器学习 · 计算机科学 2025-10-28 Pratiksha Thaker , Neil Kale , Zhiwei Steven Wu , Virginia Smith

The increasing prominence of deep learning applications and reliance on personalized data underscore the urgent need to address privacy vulnerabilities, particularly Membership Inference Attacks (MIAs). Despite numerous MIA studies,…

机器学习 · 计算机科学 2024-07-02 Chenxi Li , Abhinav Kumar , Zhen Guo , Jie Hou , Reza Tourani

Determining whether a dataset was part of a machine learning model's training data pool can reveal privacy vulnerabilities, a challenge often addressed through membership inference attacks (MIAs). Traditional MIAs typically require access…

机器学习 · 计算机科学 2025-06-03 Yongchao Huang

Membership inference attacks (MIAs) reveal whether specific data was used to train machine learning models, serving as important tools for privacy auditing and compliance assessment. Recent studies have reported that MIAs perform only…

Analyzing time-series data that contains personal information, particularly in the medical field, presents serious privacy concerns. Sensitive health data from patients is often used to train machine learning models for diagnostics and…

机器学习 · 计算机科学 2024-09-24 Noam Koren , Abigail Goldsteen , Guy Amit , Ariel Farkash

This paper presents how to leak private information from a wireless signal classifier by launching an over-the-air membership inference attack (MIA). As machine learning (ML) algorithms are used to process wireless signals to make decisions…

信号处理 · 电气工程与系统科学 2020-06-26 Yi Shi , Kemal Davaslioglu , Yalin E. Sagduyu

Membership Inference Attacks (MIAs) have emerged as a principled framework for auditing the privacy of synthetic data generated by tabular generative models, where many diverse methods have been proposed that each exploit different privacy…

密码学与安全 · 计算机科学 2025-09-09 Joshua Ward , Yuxuan Yang , Chi-Hua Wang , Guang Cheng

Recent studies have shown that deep learning models are vulnerable to membership inference attacks (MIAs), which aim to infer whether a data record was used to train a target model or not. To analyze and study these vulnerabilities, various…

机器学习 · 统计学 2025-08-12 Chenxu Zhao , Wei Qian , Aobo Chen , Mengdi Huai

Membership Inference Attacks have emerged as a dominant method for empirically measuring privacy leakage from machine learning models. Here, privacy is measured by the {\em{advantage}} or gap between a score or a function computed on the…

机器学习 · 计算机科学 2024-05-27 Ruihan Wu , Pengrun Huang , Kamalika Chaudhuri

Among all privacy attacks against Machine Learning (ML), membership inference attacks (MIA) attracted the most attention. In these attacks, the attacker is given an ML model and a data point, and they must infer whether the data point was…

密码学与安全 · 计算机科学 2025-12-02 Bram van Dartel , Marc Damie , Florian Hahn

Recently, adapting the idea of self-supervised learning (SSL) on continuous speech has started gaining attention. SSL models pre-trained on a huge amount of unlabeled audio can generate general-purpose representations that benefit a wide…

密码学与安全 · 计算机科学 2022-08-16 Wei-Cheng Tseng , Wei-Tsung Kao , Hung-yi Lee

This paper introduces a novel approach to membership inference attacks (MIA) targeting stable diffusion computer vision models, specifically focusing on the highly sophisticated Stable Diffusion V2 by StabilityAI. MIAs aim to extract…

计算机视觉与模式识别 · 计算机科学 2023-11-17 Thomas Cilloni , Charles Fleming , Charles Walter

Membership Inference Attacks (MIA) aim to infer whether a target data record has been utilized for model training or not. Existing MIAs designed for large language models (LLMs) can be bifurcated into two types: reference-free and…

计算与语言 · 计算机科学 2024-11-27 Wenjie Fu , Huandong Wang , Chen Gao , Guanghua Liu , Yong Li , Tao Jiang

Membership Inference Attacks (MIAs) aim to estimate whether a specific data point was used in the training of a given model. Existing state-of-the-art attacks typically rely on training multiple reference models to approximate the…

机器学习 · 计算机科学 2026-05-26 Zhenlong Liu , Wenyu Jiang , Feng Zhou , Hongxin Wei

An over-the-air membership inference attack (MIA) is presented to leak private information from a wireless signal classifier. Machine learning (ML) provides powerful means to classify wireless signals, e.g., for PHY-layer authentication. As…

密码学与安全 · 计算机科学 2021-07-27 Yi Shi , Yalin E. Sagduyu

Determining which data samples were used to train a model, known as Membership Inference Attack (MIA), is a well-studied and important problem with implications on data privacy. SotA methods (which are black-box attacks) rely on training…

机器学习 · 计算机科学 2026-02-26 Yuval Golbari , Navve Wasserman , Gal Vardi , Michal Irani

Membership inference attacks (MIA) try to detect if data samples were used to train a neural network model, e.g. to detect copyright abuses. We show that models with higher dimensional input and output are more vulnerable to MIA, and…

机器学习 · 计算机科学 2021-08-19 Avital Shafran , Shmuel Peleg , Yedid Hoshen