Membership Inference Attack on CIFAR100 (test)
0.99AUCNo Defense
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| No Defensebeta=0.5, Attack Method=SeqMIA2026.01 | 0.99 | 63.77 | — | — | |
| DeepLeakExplanation Method=IG2026.01 | 0.986 | — | 16.42 | 90.3 | |
| DeepLeakExplanation Method=GradCAM++2026.01 | 0.983 | — | 18 | 90.5 | |
| No Defensebeta=1.0, Attack Method=SeqMIA2026.01 | 0.98 | 62.01 | — | — | |
| No Defensebeta=10.0, Attack Method=SeqMIA2026.01 | 0.97 | 32.93 | — | — | |
| Liu et al. w/ loss traj.Explanation Method=GradCAM2026.01 | 0.962 | — | 15.8 | 88.7 | |
| Liu et al. w/ loss traj.Explanation Method=GradCAM++2026.01 | 0.962 | — | 16.5 | 89.7 | |
| Liu et al. w/ loss traj.Explanation Method=SmoothGrad2026.01 | 0.961 | — | 16.3 | 87.6 | |
| Liu et al. w/ loss traj.Explanation Method=SHAP2026.01 | 0.961 | — | 15.7 | 86.1 | |
| No Defensebeta=0.5, Attack Method=FedMIA-II2026.01 | 0.96 | 76.01 | — | — | |
| Liu et al. w/ loss traj.Explanation Method=LIME2026.01 | 0.959 | — | 16.3 | 85.2 | |
| Liu et al. w/ loss traj.Explanation Method=IG2026.01 | 0.958 | — | 16 | 87.8 | |
| Liu et al. w/ loss traj.Explanation Method=VarGrad2026.01 | 0.957 | — | 16.4 | 88.5 | |
| No Defensebeta=infinity, Attack Method=SeqMIA2026.01 | 0.92 | 11.8 | — | — | |
| No Defensebeta=1.0, Attack Method=FedMIA-II2026.01 | 0.91 | 58.57 | — | — | |
| DeepLeakExplanation Method=LIME2026.01 | 0.891 | — | 10.5 | 84.25 | |
| DeepLeakExplanation Method=SHAP2026.01 | 0.884 | — | 11.8 | 83.93 | |
| DeepLeakExplanation Method=GradCAM2026.01 | 0.86 | — | 6.78 | 82 | |
| No Defensebeta=10.0, Attack Method=FedMIA-II2026.01 | 0.85 | 26.51 | — | — | |
| DeepLeakExplanation Method=VarGrad2026.01 | 0.846 | — | 6.68 | 77.9 | |
| Shokri et al. (expl.)Explanation Method=GradCAM2026.01 | 0.843 | — | 0.6 | 77.5 | |
| Shokri et al. (expl.)Explanation Method=GradCAM++2026.01 | 0.842 | — | 0.6 | 76.5 | |
| No Defensebeta=infinity, Attack Method=FedMIA-II2026.01 | 0.83 | 12.64 | — | — | |
| DeepLeakExplanation Method=SmoothGrad2026.01 | 0.827 | — | 6.81 | 79.9 | |
| Shokri et al. (expl.)Explanation Method=VarGrad2026.01 | 0.814 | — | 0.3 | 75.4 | |
| Shokri et al. (expl.)Explanation Method=SmoothGrad2026.01 | 0.799 | — | 0.4 | 74.1 | |
| Shokri et al. (expl.)Explanation Method=SHAP2026.01 | 0.798 | — | 0.4 | 75.1 | |
| Shokri et al. (expl.)Explanation Method=LIME2026.01 | 0.788 | — | 0.4 | 74.4 | |
| Shokri et al. (expl.)Explanation Method=IG2026.01 | 0.777 | — | 0.4 | 71.2 | |
| CoFedMIDbeta=0.5, Attack Method=FedMIA-II2026.01 | 0.66 | 0.21 | — | — | |
| CoFedMIDbeta=1.0, Attack Method=FedMIA-II2026.01 | 0.64 | 2.3 | — | — | |
| CoFedMIDbeta=10.0, Attack Method=FedMIA-II2026.01 | 0.58 | 3.53 | — | — | |
| CoFedMIDbeta=0.5, Attack Method=SeqMIA2026.01 | 0.58 | 0.46 | — | — | |
| CoFedMIDbeta=infinity, Attack Method=FedMIA-II2026.01 | 0.56 | 3.04 | — | — | |
| CoFedMIDbeta=10.0, Attack Method=SeqMIA2026.01 | 0.54 | 0.03 | — | — | |
| CoFedMIDbeta=1.0, Attack Method=SeqMIA2026.01 | 0.52 | 0.4 | — | — | |
| CoFedMIDbeta=infinity, Attack Method=SeqMIA2026.01 | 0.5 | 0 | — | — |