Membership Inference Attack Defense on CIFAR100 (test)

0.5Loss (Series)CoFedMID

Evaluation results

Method
CoFedMID2026.01	0.5	0.5	0.54	0.51	0.52	0.56	0.59	0.51	-0.03
CoFedMID2026.01	0.5	0.5	0.54	0.51	0.52	0.56	0.59	0.51	-0.03
Mixup2026.01	0.52	0.66	0.5	0.64	0.54	0.57	0.8	0.57	-0.06
Mixup2026.01	0.52	0.66	0.5	0.64	0.54	0.57	0.8	0.57	-0.06
Mixup2026.01	0.53	0.73	0.51	0.65	0.52	0.6	0.5	0.57	-0.01
Mixup2026.01	0.53	0.73	0.51	0.65	0.52	0.6	0.5	0.57	-0.01
DPSGD2026.01	0.54	0.54	0.5	0.53	0.5	0.54	0.81	0.57	-0.01
CoFedMID2026.01	0.54	0.5	0.52	0.57	0.51	0.58	0.54	0.52	-0.01
DPSGD2026.01	0.54	0.54	0.5	0.53	0.5	0.54	0.81	0.57	-0.01
CoFedMID2026.01	0.54	0.5	0.52	0.57	0.51	0.58	0.54	0.52	-0.01
DPSGD2026.01	0.56	0.55	0.57	0.53	0.53	0.53	0.92	0.59	-0.05
HAMP2026.01	0.56	0.62	0.7	0.61	0.55	0.53	0.77	0.59	-0.1
DPSGD2026.01	0.56	0.55	0.57	0.53	0.53	0.53	0.92	0.59	-0.05
HAMP2026.01	0.56	0.62	0.7	0.61	0.55	0.53	0.77	0.59	-0.1
HAMP2026.01	0.61	0.65	0.73	0.62	0.51	0.54	0.55	0.55	-0.03
HAMP2026.01	0.61	0.65	0.73	0.62	0.51	0.54	0.55	0.55	-0.03
GradNoise2026.01	0.62	0.7	0.62	0.68	0.62	0.67	0.74	0.66	-0.18
GradNoise2026.01	0.62	0.7	0.62	0.68	0.62	0.67	0.74	0.66	-0.18
No Defense2026.01	0.65	0.78	0.72	0.82	0.71	0.8	0.89	0.77	0.46
RelaxLoss2026.01	0.65	0.68	0.73	0.83	0.68	0.78	0.65	0.71	-0.01
No Defense2026.01	0.65	0.78	0.72	0.82	0.71	0.8	0.89	0.77	0.46
RelaxLoss2026.01	0.65	0.68	0.73	0.83	0.68	0.78	0.65	0.71	-0.01
RelaxLoss2026.01	0.66	0.66	0.72	0.83	0.66	0.77	0.69	0.71	0
RelaxLoss2026.01	0.66	0.66	0.72	0.83	0.66	0.77	0.69	0.71	0
GradSparse2026.01	0.69	0.81	0.8	0.86	0.76	0.82	0.94	0.78	-0.01
GradSparse2026.01	0.69	0.8	0.8	0.86	0.75	0.82	0.94	0.78	-0.01
GradSparse2026.01	0.69	0.81	0.8	0.86	0.76	0.82	0.94	0.78	-0.01
GradSparse2026.01	0.69	0.8	0.8	0.86	0.75	0.82	0.94	0.78	-0.01
GradNoise2026.01	0.71	0.81	0.72	0.83	0.77	0.83	0.9	0.79	0.01
GradNoise2026.01	0.71	0.81	0.72	0.83	0.77	0.83	0.9	0.79	0.01
CoFedMID2026.01	2.28	2.08	0.97	3.12	2.18	0.29	0.11	1.58	-0.01
CoFedMID2026.01	2.28	2.08	0.97	3.12	2.18	0.29	0.11	1.58	-0.01
CoFedMID2026.01	3.34	2.54	0.24	0.48	4.18	0.06	0.71	1.65	-0.03
CoFedMID2026.01	3.34	2.54	0.24	0.48	4.18	0.06	0.71	1.65	-0.03
HAMP2026.01	9.42	18.73	0.03	21.12	0	0.75	7.81	7.74	-0.03
HAMP2026.01	9.42	18.73	0.03	21.12	0	0.75	7.81	7.74	-0.03
No Defense2026.01	10.52	6.44	4.89	12.36	2.22	2.2	10.62	6.59	0.46
No Defense2026.01	10.52	6.44	4.89	12.36	2.22	2.2	10.62	6.59	0.46
GradNoise2026.01	10.65	5.21	6.36	12.5	3.83	1.14	10.48	7.45	-0.18
GradNoise2026.01	10.65	5.21	6.36	12.5	3.83	1.14	10.48	7.45	-0.18
HAMP2026.01	11.18	13.58	0	15	6.33	0.2	13.15	5.46	-0.1
HAMP2026.01	11.18	13.58	0	15	6.33	0.2	13.15	5.46	-0.1
Mixup2026.01	12	4.44	13.64	16.72	2.84	0.89	0.15	5.81	-0.01
Mixup2026.01	12	4.44	13.64	16.72	2.84	0.89	0.15	5.81	-0.01
GradSparse2026.01	12.55	10.87	10.03	20.13	1.49	3.52	16.48	7.87	-0.01
GradSparse2026.01	12.55	10.87	10.03	20.13	1.49	3.52	16.48	7.87	-0.01
GradSparse2026.01	13.23	9.26	13.08	19.18	8.29	2.23	13.8	11.87	-0.01
GradSparse2026.01	13.23	9.26	13.08	19.18	8.29	2.23	13.8	11.87	-0.01
Mixup2026.01	13.63	4.38	8.28	14.89	4.02	0.1	1.2	4.75	-0.06
Mixup2026.01	13.63	4.38	8.28	14.89	4.02	0.1	1.2	4.75	-0.06
GradNoise2026.01	13.82	8.82	3.51	13.72	2.3	3.94	14.69	8.68	0.01
GradNoise2026.01	13.82	8.82	3.51	13.72	2.3	3.94	14.69	8.68	0.01
RelaxLoss2026.01	14.47	1.67	3.5	10.82	3.96	2.26	8.49	5.33	-0.01
RelaxLoss2026.01	14.47	1.67	3.5	10.82	3.96	2.26	8.49	5.33	-0.01
DPSGD2026.01	15.62	3.08	5.77	0.31	1.93	0.06	4.58	4.05	-0.01
DPSGD2026.01	15.62	3.08	5.77	0.31	1.93	0.06	4.58	4.05	-0.01
RelaxLoss2026.01	16.43	0.28	—	12.48	2.94	1.82	8.55	3.98	0
RelaxLoss2026.01	16.43	0.28	3.52	12.48	2.94	1.82	8.55	3.98	0
DPSGD2026.01	16.93	3.1	1.82	0.2	2.34	0	15.73	5.59	-0.05
DPSGD2026.01	16.93	3.1	1.82	0.2	2.34	0	15.73	5.59	-0.05