Membership Inference Attack on CIFAR-10 (forget)
72.5AUCBT (base)
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| BT (base)Unlearning Algorithm=BT, Defense Strategy=Base2025.11 | 72.5 | — | — | 0 | 17.7 | 28.7 | |
| BT + WARPUnlearning Algorithm=BT, Defense Strategy=WARP2025.11 | 66.1 | — | — | 0 | 13.7 | 21.9 | |
| PGU (base)Unlearning Algorithm=PGU, Defense Strategy=Base2025.11 | 63.6 | — | — | 2.4 | 4 | 9.8 | |
| PGU + WARPUnlearning Algorithm=PGU, Defense Strategy=WARP2025.11 | 63.1 | — | — | 1.8 | 3.6 | 10.4 | |
| Salun (base)Unlearning Algorithm=Salun, Defense Strategy=Base2025.11 | 57.2 | — | — | 2 | 6.2 | 12.1 | |
| Salun + WARPUnlearning Algorithm=Salun, Defense Strategy=WARP2025.11 | 56.5 | — | — | 1.9 | 5.9 | 11.3 | |
| NGP (base)Unlearning Algorithm=NGP, Defense Strategy=Base2025.11 | 54.5 | — | — | 1.2 | 3 | 7.7 | |
| SCRUB (base)Unlearning Algorithm=SCRUB, Defense Strategy=Base2025.11 | 54.3 | — | — | 2 | 4.7 | 9.2 | |
| SCRUB + WARPUnlearning Algorithm=SCRUB, Defense Strategy=WARP2025.11 | 52.6 | — | — | 1.5 | 3.6 | 7.8 | |
| NGP + WARPUnlearning Algorithm=NGP, Defense Strategy=WARP2025.11 | 51.6 | — | — | 0.3 | 1.4 | 5.5 | |
| SF (base)Unlearning Algorithm=SF, Defense Strategy=Base2025.11 | 50.9 | — | — | 0.4 | 1.5 | 5.6 | |
| SF + WARPUnlearning Algorithm=SF, Defense Strategy=WARP2025.11 | 50.6 | — | — | 0.2 | 1.2 | 5.1 | |
| BadTBackbone=ResNet-182025.03 | — | 48.82 | 0.5 | — | — | — | |
| FTBackbone=ResNet-182025.03 | — | 53.49 | 4.17 | — | — | — | |
| GABackbone=ResNet-182025.03 | — | 52.21 | 2.89 | — | — | — | |
| l1-sparseBackbone=ResNet-182025.03 | — | 49.63 | 0.31 | — | — | — | |
| NoTBackbone=ResNet-182025.03 | — | 49.52 | 0.2 | — | — | — | |
| RandLBackbone=ResNet-182025.03 | — | 54.6 | 5.28 | — | — | — | |
| RetrainBackbone=ResNet-182025.03 | — | 49.32 | 0 | — | — | — | |
| SalUnBackbone=ResNet-182025.03 | — | 48.18 | 1.14 | — | — | — | |
| SSDBackbone=ResNet-182025.03 | — | 58.25 | 8.93 | — | — | — |