ResearchDatasetsRAR vs. ImageNetRAR vs. ImageNetFollowBenchmarksTaskDatasetSOTA methodSortMost resultsRecently updatedMost papersApplyTaskDatasetSOTA resultTrendResultsMembership Inference AttackRAR (belonging) vs. ImageNet (non-belonging)100TPR@1%FPR3