Membership Inference Attack on CIFAR-10 (AUC, EER, TPR)
0.9686AUCCoLA
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| CoLAIntensity=Heavy (r = 0.6), Setting=SP-MIA2026.04 | 0.9686 | — | — | 88.6 | — | — | |
| CoLAIntensity=Extensive (r = 0.8), Setting=SP-MIA2026.04 | 0.922 | — | — | 91.86 | — | — | |
| CoLAIntensity=Heavy (r = 0.6), Setting=TM-MIA2026.04 | 0.8906 | — | — | 60.36 | — | — | |
| CoLAIntensity=Medium (r = 0.4), Setting=TM-MIA2026.04 | 0.8853 | — | — | 60.1 | — | — | |
| CoLAIntensity=Light (r = 0.2), Setting=TM-MIA2026.04 | 0.8377 | — | — | 42.19 | — | — | |
| CoLAIntensity=Medium (r = 0.4), Setting=SP-MIA2026.04 | 0.8193 | — | — | 42.66 | — | — | |
| CoLAIntensity=Extensive (r = 0.8), Setting=TM-MIA2026.04 | 0.8074 | — | — | 49.76 | — | — | |
| Adversarially Robust LiRAlambda=10, perturbation budget=4.0/2552026.04 | 0.7937 | 28.23 | 3.6 | 17.95 | 32.95 | 57 | |
| Adversarially Robust LiRAlambda=15, perturbation budget=4.0/2552026.04 | 0.7927 | 28.43 | 3.55 | 17.05 | 31.95 | 55.5 | |
| Adversarially Robust LiRAlambda=5, perturbation budget=4.0/2552026.04 | 0.7925 | 28.95 | 4.55 | 18.45 | 34.35 | 57.05 | |
| Adversarially Robust LiRAlambda=20, perturbation budget=4.0/2552026.04 | 0.7913 | 28.6 | 3.5 | 16.95 | 31.25 | 54.25 | |
| Adversarially Robust LiRAlambda=25, perturbation budget=4.0/2552026.04 | 0.7897 | 28.62 | 3.5 | 16.6 | 30.95 | 54.05 | |
| Adversarially Robust LiRAlambda=30, perturbation budget=4.0/2552026.04 | 0.7882 | 28.85 | 3.5 | 16.5 | 29.9 | 52.4 | |
| Adversarially Robust LiRAlambda=35, perturbation budget=4.0/2552026.04 | 0.7869 | 29.03 | 3.3 | 16.2 | 29.65 | 52 | |
| LiRAIntensity=Light (r = 0.2), Setting=TM-MIA2026.04 | 0.6986 | — | — | 15.74 | — | — | |
| LiRA Baselineperturbation budget=4.0/2552026.04 | 0.6832 | 38.48 | 2.8 | 9.55 | 17.55 | 32.25 | |
| NN_clsIntensity=Light (r = 0.2), Setting=TM-MIA2026.04 | 0.6724 | — | — | 19.3 | — | — | |
| NN_clsIntensity=Medium (r = 0.4), Setting=TM-MIA2026.04 | 0.6684 | — | — | 12.51 | — | — | |
| NNIntensity=Light (r = 0.2), Setting=TM-MIA2026.04 | 0.64 | — | — | 12.13 | — | — | |
| LiRAIntensity=Medium (r = 0.4), Setting=TM-MIA2026.04 | 0.6296 | — | — | 4.61 | — | — | |
| NN_clsIntensity=Extensive (r = 0.8), Setting=TM-MIA2026.04 | 0.628 | — | — | 11.27 | — | — | |
| NN_top3Intensity=Light (r = 0.2), Setting=TM-MIA2026.04 | 0.6157 | — | — | 8.93 | — | — | |
| LiRAIntensity=Extensive (r = 0.8), Setting=SP-MIA2026.04 | 0.6154 | — | — | 5.09 | — | — | |
| NNIntensity=Extensive (r = 0.8), Setting=TM-MIA2026.04 | 0.6141 | — | — | 10.99 | — | — | |
| CoLAIntensity=Light (r = 0.2), Setting=SP-MIA2026.04 | 0.6139 | — | — | 14.24 | — | — | |
| NN_top3Intensity=Medium (r = 0.4), Setting=TM-MIA2026.04 | 0.6037 | — | — | 2.91 | — | — | |
| NN_top3Intensity=Extensive (r = 0.8), Setting=TM-MIA2026.04 | 0.6013 | — | — | 4.21 | — | — | |
| NNIntensity=Medium (r = 0.4), Setting=TM-MIA2026.04 | 0.5984 | — | — | 10.8 | — | — | |
| LiRAIntensity=Extensive (r = 0.8), Setting=TM-MIA2026.04 | 0.5966 | — | — | 4.63 | — | — | |
| NN_top3Intensity=Extensive (r = 0.8), Setting=SP-MIA2026.04 | 0.5956 | — | — | 4 | — | — | |
| NN_clsIntensity=Heavy (r = 0.6), Setting=TM-MIA2026.04 | 0.5744 | — | — | 19.63 | — | — | |
| NN_clsIntensity=Extensive (r = 0.8), Setting=SP-MIA2026.04 | 0.5666 | — | — | 7.6 | — | — | |
| NNIntensity=Extensive (r = 0.8), Setting=SP-MIA2026.04 | 0.5564 | — | — | 7.59 | — | — | |
| NNIntensity=Heavy (r = 0.6), Setting=TM-MIA2026.04 | 0.55 | — | — | 19.31 | — | — | |
| LiRAIntensity=Medium (r = 0.4), Setting=SP-MIA2026.04 | 0.5499 | — | — | 5.31 | — | — | |
| NN_clsIntensity=Medium (r = 0.4), Setting=SP-MIA2026.04 | 0.5451 | — | — | 6.64 | — | — | |
| LiRAIntensity=Heavy (r = 0.6), Setting=SP-MIA2026.04 | 0.5369 | — | — | 4.26 | — | — | |
| NN_top3Intensity=Medium (r = 0.4), Setting=SP-MIA2026.04 | 0.5359 | — | — | 3.56 | — | — | |
| NN_clsIntensity=Heavy (r = 0.6), Setting=SP-MIA2026.04 | 0.5353 | — | — | 12.37 | — | — | |
| NN_top3Intensity=Heavy (r = 0.6), Setting=SP-MIA2026.04 | 0.532 | — | — | 2.8 | — | — | |
| LiRAIntensity=Heavy (r = 0.6), Setting=TM-MIA2026.04 | 0.5261 | — | — | 2.81 | — | — | |
| NN_top3Intensity=Heavy (r = 0.6), Setting=TM-MIA2026.04 | 0.524 | — | — | 1.67 | — | — | |
| NNIntensity=Medium (r = 0.4), Setting=SP-MIA2026.04 | 0.5233 | — | — | 6.31 | — | — | |
| NNIntensity=Heavy (r = 0.6), Setting=SP-MIA2026.04 | 0.5221 | — | — | 12.2 | — | — | |
| NN_top3Intensity=Light (r = 0.2), Setting=SP-MIA2026.04 | 0.5177 | — | — | 3.34 | — | — | |
| NN_clsIntensity=Light (r = 0.2), Setting=SP-MIA2026.04 | 0.5159 | — | — | 6.37 | — | — | |
| LiRAIntensity=Light (r = 0.2), Setting=SP-MIA2026.04 | 0.5126 | — | — | 6.43 | — | — | |
| NNIntensity=Light (r = 0.2), Setting=SP-MIA2026.04 | 0.5123 | — | — | 5.83 | — | — |