List your company
ResearchFormerly WizWand

Membership Inference Attack on CIFAR100 (test)

0.99AUCNo Defense
0.48040.61270.7450.8773Jan 6, 2026Jan 7, 2026Jan 8, 2026Jan 9, 2026Jan 10, 2026Jan 11, 2026
Updated 8mo ago

Evaluation results

MethodLinks
No Defensebeta=0.5, Attack Method=SeqMIA2026.010.9963.77——
DeepLeakExplanation Method=IG2026.010.986—16.4290.3
DeepLeakExplanation Method=GradCAM++2026.010.983—1890.5
No Defensebeta=1.0, Attack Method=SeqMIA2026.010.9862.01——
No Defensebeta=10.0, Attack Method=SeqMIA2026.010.9732.93——
Liu et al. w/ loss traj.Explanation Method=GradCAM2026.010.962—15.888.7
Liu et al. w/ loss traj.Explanation Method=GradCAM++2026.010.962—16.589.7
Liu et al. w/ loss traj.Explanation Method=SmoothGrad2026.010.961—16.387.6
Liu et al. w/ loss traj.Explanation Method=SHAP2026.010.961—15.786.1
No Defensebeta=0.5, Attack Method=FedMIA-II2026.010.9676.01——
Liu et al. w/ loss traj.Explanation Method=LIME2026.010.959—16.385.2
Liu et al. w/ loss traj.Explanation Method=IG2026.010.958—1687.8
Liu et al. w/ loss traj.Explanation Method=VarGrad2026.010.957—16.488.5
No Defensebeta=infinity, Attack Method=SeqMIA2026.010.9211.8——
No Defensebeta=1.0, Attack Method=FedMIA-II2026.010.9158.57——
DeepLeakExplanation Method=LIME2026.010.891—10.584.25
DeepLeakExplanation Method=SHAP2026.010.884—11.883.93
DeepLeakExplanation Method=GradCAM2026.010.86—6.7882
No Defensebeta=10.0, Attack Method=FedMIA-II2026.010.8526.51——
DeepLeakExplanation Method=VarGrad2026.010.846—6.6877.9
Shokri et al. (expl.)Explanation Method=GradCAM2026.010.843—0.677.5
Shokri et al. (expl.)Explanation Method=GradCAM++2026.010.842—0.676.5
No Defensebeta=infinity, Attack Method=FedMIA-II2026.010.8312.64——
DeepLeakExplanation Method=SmoothGrad2026.010.827—6.8179.9
Shokri et al. (expl.)Explanation Method=VarGrad2026.010.814—0.375.4
Shokri et al. (expl.)Explanation Method=SmoothGrad2026.010.799—0.474.1
Shokri et al. (expl.)Explanation Method=SHAP2026.010.798—0.475.1
Shokri et al. (expl.)Explanation Method=LIME2026.010.788—0.474.4
Shokri et al. (expl.)Explanation Method=IG2026.010.777—0.471.2
CoFedMIDbeta=0.5, Attack Method=FedMIA-II2026.010.660.21——
CoFedMIDbeta=1.0, Attack Method=FedMIA-II2026.010.642.3——
CoFedMIDbeta=10.0, Attack Method=FedMIA-II2026.010.583.53——
CoFedMIDbeta=0.5, Attack Method=SeqMIA2026.010.580.46——
CoFedMIDbeta=infinity, Attack Method=FedMIA-II2026.010.563.04——
CoFedMIDbeta=10.0, Attack Method=SeqMIA2026.010.540.03——
CoFedMIDbeta=1.0, Attack Method=SeqMIA2026.010.520.4——
CoFedMIDbeta=infinity, Attack Method=SeqMIA2026.010.50——