# Membership Inference Attack on GTSRB (TPR @ 0.1% FPR, Balanced Accuracy) Source: [Membership Inference Attack on GTSRB (TPR @ 0.1% FPR, Balanced Accuracy)]() Collection index: [llms.txt]() Data updated: 2026-07-07T07:48:21.461Z Evaluation of Membership Inference Attack performance on the GTSRB dataset, reporting True Positive Rate at 0.1% False Positive Rate and Balanced Accuracy. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Membership Inference Attack | | Dataset (including any stated split) | GTSRB | | Metric | TPR @ 0.1% FPR | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 28 of 28 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [TPR @ 0.1% FPR](): Higher is better; unit: PERCENT. - [Balanced Accuracy](): Higher is better; unit: PERCENT. ## Recorded results | Method | TPR @ 0.1% FPR | Result date | Report paper | | --- | --- | --- | --- | | LIME | 37.06 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 36.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 33.23 | Not recorded | 6a4c87fc85dba69fef8b25cc | | LIME | 30.12 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 29.71 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 29.39 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 28.75 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 26.5 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 23.32 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 23.3 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 20.13 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 19.8 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 12.7 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 12.46 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 0.15 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 0.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 0.1 | Not recorded | 6a4c87fc85dba69fef8b25cc | | LIME | 0.01 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SmoothGrad | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM++ | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | IG | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | VarGrad | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | GradCAM | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | SHAP | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | | LIME | 0 | Not recorded | 6a4c87fc85dba69fef8b25cc | ### LIME TPR @ 0.1% FPR: 37.06. Result ID: 6a4caf2a60b88bb339c7d8af. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 36.1. Result ID: 6a4caf2a60b88bb339c7d8ad. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 33.23. Result ID: 6a4caf2a60b88bb339c7d8bb. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### LIME TPR @ 0.1% FPR: 30.12. Result ID: 6a4caf2a60b88bb339c7d8bd. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 29.71. Result ID: 6a4caf2a60b88bb339c7d8ae. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 29.39. Result ID: 6a4caf2a60b88bb339c7d8aa. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 28.75. Result ID: 6a4caf2a60b88bb339c7d8ac. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 26.5. Result ID: 6a4caf2a60b88bb339c7d8ba. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 23.32. Result ID: 6a4caf2a60b88bb339c7d8bc. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 23.3. Result ID: 6a4caf2a60b88bb339c7d8b8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 20.13. Result ID: 6a4caf2a60b88bb339c7d8a9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 19.8. Result ID: 6a4caf2a60b88bb339c7d8b7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 12.7. Result ID: 6a4caf2a60b88bb339c7d8b9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"Memguard","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 12.46. Result ID: 6a4caf2a60b88bb339c7d8ab. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"None","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 0.15. Result ID: 6a4caf2a60b88bb339c7d8be. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 0.1. Result ID: 6a4caf2a60b88bb339c7d8c1. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 0.1. Result ID: 6a4caf2a60b88bb339c7d8c2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### LIME TPR @ 0.1% FPR: 0.01. Result ID: 6a4caf2a60b88bb339c7d8b6. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SmoothGrad TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8b0. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8b1. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8b2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM++ TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8b3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### IG TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8b4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8b5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"DP (ϵ = 100)","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### VarGrad TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8bf. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### GradCAM TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8c0. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### SHAP TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8c3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. ### LIME TPR @ 0.1% FPR: 0. Result ID: 6a4caf2a60b88bb339c7d8c4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Defense":"TIER","Backbone":"ResNet-18"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.