Membership Inference Attack on CINIC-10 (AUC, EER, TPRs)
0.8166AUCAdversarially Robust LiRA
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| Adversarially Robust LiRAlambda=5, perturbation budget=4.0/2552026.04 | 0.8166 | 24.82 | 2.65 | 12.05 | 29.95 | 62.3 | |
| Adversarially Robust LiRAlambda=10, perturbation budget=4.0/2552026.04 | 0.8091 | 25.85 | 2.15 | 10.9 | 26 | 59.4 | |
| Adversarially Robust LiRAlambda=15, perturbation budget=4.0/2552026.04 | 0.8033 | 26.47 | 2.1 | 10.35 | 23.6 | 57.3 | |
| Adversarially Robust LiRAlambda=20, perturbation budget=4.0/2552026.04 | 0.7983 | 27.2 | 2.15 | 9.85 | 22.55 | 55.1 | |
| Adversarially Robust LiRAlambda=25, perturbation budget=4.0/2552026.04 | 0.7942 | 27.7 | 2 | 9.45 | 21.2 | 53.1 | |
| Adversarially Robust LiRAlambda=30, perturbation budget=4.0/2552026.04 | 0.7905 | 28.18 | 2 | 9.3 | 20.4 | 51.8 | |
| Adversarially Robust LiRAlambda=35, perturbation budget=4.0/2552026.04 | 0.7872 | 28.5 | 1.95 | 9.15 | 20.15 | 51.1 | |
| LiRA Baselineperturbation budget=4.0/2552026.04 | 0.6734 | 38.5 | 1.5 | 6.9 | 13 | 29.1 |