ResearchDatasetsRAR vs. ImageNetFollowBenchmarksTask NameDataset NameSOTA MethodSortMost resultsRecently updatedMost papersApplyTask NameDataset NameSOTA ResultTrendResultsMembership Inference AttackRAR (belonging) vs. ImageNet (non-belonging)100TPR@1%FPR3