Membership Inference Attack on Book-Crossing
86.86AccuracyMIA4LLMRS
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| MIA4LLMRSTarget Model=T5-base2025.09 | 86.86 | 98.97 | 88.28 | 93.59 | |
| PPLModel=LLaMA32025.09 | 69.78 | 55.77 | 38.07 | 27.61 | |
| min-k%Model=T52025.09 | 65.64 | 28.14 | 21.44 | 49.37 | |
| min-k%Target Model=T5-base2025.09 | 65.64 | 28.14 | 21.44 | 49.37 | |
| min-k%Model=LLaMA32025.09 | 57.61 | 81.24 | 38.96 | 27.64 | |
| ShadowTarget Model=T5-base2025.09 | 53.86 | 55.15 | 54.45 | 55.36 | |
| min-k%++Model=LLaMA32025.09 | 53.61 | 53.37 | 53.09 | 46.88 | |
| min-k%Model=GPT-22025.09 | 51.49 | 53.61 | 26.91 | 47.02 | |
| min-k%++Model=GPT-22025.09 | 51.49 | 52.21 | 52.99 | 49.09 | |
| ZlibTarget Model=T5-base2025.09 | 51.25 | 49.79 | 25.39 | 46.69 | |
| PPLModel=GPT-22025.09 | 47.8 | 58.45 | 27.17 | 47.02 | |
| PPLModel=T52025.09 | 42.96 | 60.93 | 26.24 | 49.41 | |
| PPLTarget Model=T5-base2025.09 | 42.96 | 60.93 | 26.24 | 49.41 | |
| min-k%++Model=T52025.09 | 28.56 | 44.54 | 38.4 | 87.05 | |
| min-k%++Target Model=T5-base2025.09 | 28.56 | 44.54 | 38.4 | 87.05 |