Membership Inference Attack on Cora 25% nodes (train)
10p5 ScoreMP
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 10 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 9.9 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 9.8 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 9.8 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 9.7 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 9.6 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 9.6 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 9.6 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 9.5 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 9.5 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 9.5 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 9.4 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 9.4 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 9.3 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 9.2 | 11 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 9.1 | 11 | 13 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 7.9 | 9.1 | 12 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 7.4 | 8.7 | 11 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 7.3 | 8.6 | 11 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 7 | 8.3 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 6.9 | 8.3 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 6.6 | 8.1 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 6.2 | 7.7 | 10 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 6.2 | 7.4 | 9.9 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 6.1 | 7.4 | 9.8 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 5.6 | 6.9 | 9.5 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=no edges2026.06 | 5.5 | 6.7 | 9.2 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 5.4 | 5.7 | 6.3 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 5.4 | 5.7 | 6.1 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 5.2 | 6.2 | 8.4 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 5.2 | 6.3 | 8.8 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 5.1 | 5.8 | 8 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 5.1 | 6.1 | 8.8 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 5 | 5.8 | 7.8 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 5 | 5.8 | 7.9 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 4.8 | 5.1 | 5.5 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 4.8 | 5 | 5.3 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 4.8 | 5.6 | 7.8 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=full edge2026.06 | 4.8 | 5.3 | 6.5 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 4.7 | 5.3 | 7.2 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 4.7 | 5.4 | 7.4 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 4.6 | 5.4 | 7.6 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 4.4 | 4.8 | 5.7 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 4.4 | 5 | 6.2 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 4.2 | 5.4 | 8.2 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 4.2 | 4.5 | 4.8 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 4.2 | 4.7 | 5.7 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 4 | 4.4 | 4.9 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=no edges2026.06 | 3.9 | 4.3 | 5.2 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=full edge2026.06 | 3.8 | 4.2 | 4.9 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 3.8 | 3.9 | 3.9 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 3.7 | 3.9 | 4 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 3.5 | 3.5 | 3.8 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 3.1 | 3.5 | 4.2 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 3.1 | 3.2 | 3.3 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 3 | 3.1 | 3.1 | |
| MPSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 3 | 3 | 3.1 | |
| MPSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 2.9 | 2.9 | 2.9 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 2.7 | 3.2 | 5.9 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GCN, Graph Edge Information=full edge2026.06 | 2.2 | 2.3 | 2.4 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 2.1 | 2.2 | 2.4 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=clean, Architecture=GAT, Graph Edge Information=no edges2026.06 | 1.8 | 1.9 | 2 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GCN, Graph Edge Information=full edge2026.06 | 1.6 | 1.6 | 1.6 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Noise Condition=noisy, Architecture=GAT, Graph Edge Information=no edges2026.06 | 1.5 | 1.5 | 1.5 |