# Membership Inference Attack on CINIC-10 (TPR @ 0.1% FPR, Balanced Accuracy) Source: [Membership Inference Attack on CINIC-10 (TPR @ 0.1% FPR, Balanced Accuracy)]() Collection index: [llms.txt]() Data updated: 2026-07-07T07:48:21.426Z Evaluation of a model's susceptibility to Membership Inference Attacks on the CINIC-10 dataset, reporting True Positive Rate at 0.1% False Positive Rate and Balanced Accuracy. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Membership Inference Attack | | Dataset (including any stated split) | CINIC10 (CN10) | | Metric | TPR @ 0.1% FPR | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 28 of 28 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [TPR @ 0.1% FPR](): Higher is better; unit: PERCENT. - [Balanced Accuracy](): Higher is better; unit: PERCENT. ## Recorded results | Method | TPR @ 0.1% FPR | Result date | Report paper | | --- | --- | --- | --- | | LIME | 1.5 | Not recorded | 6a4c87fc85dba69fef8b25cc | | LIME | 1.4 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 0.9 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 0.89 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 0.8 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 0.8 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 0.5 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 0.45 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 0.35 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 0.35 | Not recorded | 6a4c87fc85dba69fef8b25cc | | LIME | 0.35 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 0.3 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 0.3 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 0.3 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 0.2 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 0.15 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 0.15 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 0.15 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 0.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 0.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 0.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | LIME | 0.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 0.05 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 0.05 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 0.05 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | ### LIME TPR @ 0.1% FPR: 1.5. Result ID: 6a4caf2a60b88bb339c7d8a1. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### LIME TPR @ 0.1% FPR: 1.4. Result ID: 6a4caf2a60b88bb339c7d893. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 0.9. Result ID: 6a4caf2a60b88bb339c7d89c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 0.89. Result ID: 6a4caf2a60b88bb339c7d88e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 0.8. Result ID: 6a4caf2a60b88bb339c7d88f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 0.8. Result ID: 6a4caf2a60b88bb339c7d89d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 0.5. Result ID: 6a4caf2a60b88bb339c7d89b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 0.45. Result ID: 6a4caf2a60b88bb339c7d88d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 0.35. Result ID: 6a4caf2a60b88bb339c7d895. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 0.35. Result ID: 6a4caf2a60b88bb339c7d8a0. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### LIME TPR @ 0.1% FPR: 0.35. Result ID: 6a4caf2a60b88bb339c7d8a8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 0.3. Result ID: 6a4caf2a60b88bb339c7d892. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 0.3. Result ID: 6a4caf2a60b88bb339c7d89e. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 0.3. Result ID: 6a4caf2a60b88bb339c7d8a7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 0.2. Result ID: 6a4caf2a60b88bb339c7d890. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 0.15. Result ID: 6a4caf2a60b88bb339c7d894. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 0.15. Result ID: 6a4caf2a60b88bb339c7d898. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 0.15. Result ID: 6a4caf2a60b88bb339c7d899. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 0.1. Result ID: 6a4caf2a60b88bb339c7d891. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 0.1. Result ID: 6a4caf2a60b88bb339c7d896. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 0.1. Result ID: 6a4caf2a60b88bb339c7d897. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### LIME TPR @ 0.1% FPR: 0.1. Result ID: 6a4caf2a60b88bb339c7d89a. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 0.05. Result ID: 6a4caf2a60b88bb339c7d89f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 0.05. Result ID: 6a4caf2a60b88bb339c7d8a2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 0.05. Result ID: 6a4caf2a60b88bb339c7d8a5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8a3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8a4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8a6. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.