Membership Inference Attack on Image AutoRegressive (IAR) Models
94.57TPR@FPR=1%MIA for IARs
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| MIA for IARsModel=VAR-d302025.02 | 94.57 | — | — | — | |
| MIA for IARsModel=RAR-XXL2025.02 | 49.8 | — | — | — | |
| MIA for IARsModel=RAR-XL2025.02 | 26.14 | — | — | — | |
| MIA for IARsModel=VAR-d242025.02 | 25.39 | — | — | — | |
| LLM-specific MIAsModel=VAR-d302025.02 | 16.68 | — | — | — | |
| LLM-specific MIAsModel=RAR-XXL2025.02 | 14.62 | — | — | — | |
| MIA for IARsModel=VAR-d202025.02 | 9.26 | — | — | — | |
| MIA for IARsModel=RAR-L2025.02 | 8.66 | — | — | — | |
| LLM-specific MIAsModel=RAR-XL2025.02 | 6.27 | — | — | — | |
| SD-MIA2026.05 | 6.2 | 0.5868 | 15.2 | 22.8 | |
| MIA for IARsModel=RAR-B2025.02 | 4.3 | — | — | — | |
| LLM-specific MIAsModel=VAR-d242025.02 | 3.72 | — | — | — | |
| MIA for IARsModel=MAR-H2025.02 | 3.4 | — | — | — | |
| LLM-specific MIAsModel=RAR-L2025.02 | 3.25 | — | — | — | |
| Reconstruction2026.05 | 3.2 | 0.5555 | 7.8 | 14 | |
| MIA for IARsModel=VAR-d162025.02 | 3.05 | — | — | — | |
| MIA for IARsModel=MAR-L2025.02 | 2.61 | — | — | — | |
| LLM-specific MIAsModel=RAR-B2025.02 | 2.36 | — | — | — | |
| LLM-specific MIAsModel=VAR-d202025.02 | 2.21 | — | — | — | |
| LLM-specific MIAsModel=MAR-H2025.02 | 2.18 | — | — | — | |
| MIA for IARsModel=MAR-B2025.02 | 2.09 | — | — | — | |
| LLM-specific MIAsModel=MAR-L2025.02 | 1.89 | — | — | — | |
| LLM-specific MIAsModel=MAR-B2025.02 | 1.69 | — | — | — | |
| LLM-specific MIAsModel=VAR-d162025.02 | 1.62 | — | — | — |