# Membership Inference Attack on ImageNet (AUC, ASR, TPR@1%FPR)

Source: [Membership Inference Attack on ImageNet (AUC, ASR, TPR@1%FPR)](<https://www.sota2.com/research/sota/membership-inference-attack-on-imagenet-auc-asr-tpr-at-1-percent-fpr>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-04-27T06:26:24.155Z

Evaluation of a model's susceptibility to Membership Inference Attacks on the ImageNet dataset, specifically reporting metrics including AUC, Attack Success Rate (ASR), and True Positive Rate at 1% False Positive Rate (TPR@1%FPR).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Membership Inference Attack |
| Dataset (including any stated split) | ImageNet |
| Metric | AUC |
| Unit | SCALAR |
| Direction | Higher is better |
| Results loaded | 15 of 15 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [AUC](<https://www.sota2.com/research/sota/membership-inference-attack-on-imagenet-auc-asr-tpr-at-1-percent-fpr.md?metric=AUC>): Higher is better; unit: SCALAR.

- [ASR](<https://www.sota2.com/research/sota/membership-inference-attack-on-imagenet-auc-asr-tpr-at-1-percent-fpr.md?metric=ASR>): Higher is better; unit: PERCENT.

- [TPR@1%FPR](<https://www.sota2.com/research/sota/membership-inference-attack-on-imagenet-auc-asr-tpr-at-1-percent-fpr.md?metric=TPR%401%25FPR>): Higher is better; unit: PERCENT.

## Recorded results

| Method | AUC | Result date | Report paper |
| --- | --- | --- | --- |
| SimA | 72.55 | Not recorded | 692689c1d6b0dd334293061d |
| SimA-MC | 71.13 | Not recorded | 68fa7baf1e209131cea89db2 |
| SecMI | 71.02 | Not recorded | 692689c1d6b0dd334293061d |
| PIA | 70.74 | Not recorded | 692689c1d6b0dd334293061d |
| Loss | 69.99 | Not recorded | 692689c1d6b0dd334293061d |
| SimA | 69.62 | Not recorded | 692689c1d6b0dd334293061d |
| SimA | 69.62 | Not recorded | 68fa7baf1e209131cea89db2 |
| SimA | 69.3 | Not recorded | 692689c1d6b0dd334293061d |
| SecMI | 68.21 | Not recorded | 692689c1d6b0dd334293061d |
| SecMIstat | 68.21 | Not recorded | 68fa7baf1e209131cea89db2 |
| Loss | 67.49 | Not recorded | 692689c1d6b0dd334293061d |
| Loss | 67.49 | Not recorded | 68fa7baf1e209131cea89db2 |
| PFAMImat | 67.44 | Not recorded | 68fa7baf1e209131cea89db2 |
| PIA | 66.09 | Not recorded | 692689c1d6b0dd334293061d |
| PIA | 66.09 | Not recorded | 68fa7baf1e209131cea89db2 |

### SimA

AUC: 72.55. Result ID: 69c3d7f147f34ce924ad17f6.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"filtered (proposed ranking)"}. This record does not assert independent reproduction.

### SimA-MC

AUC: 71.13. Result ID: 69ef017b47f34ce924d4757e.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

Recorded evaluation configuration: {"#Query":"10","#mc":"10"}. This record does not assert independent reproduction.

### SecMI

AUC: 71.02. Result ID: 69c3d7f147f34ce924ad17fa.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"filtered (proposed ranking)"}. This record does not assert independent reproduction.

### PIA

AUC: 70.74. Result ID: 69c3d7f147f34ce924ad17fc.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"filtered (proposed ranking)"}. This record does not assert independent reproduction.

### Loss

AUC: 69.99. Result ID: 69c3d7f147f34ce924ad17f8.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"filtered (proposed ranking)"}. This record does not assert independent reproduction.

### SimA

AUC: 69.62. Result ID: 69c3d7f147f34ce924ad17f5.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"none"}. This record does not assert independent reproduction.

### SimA

AUC: 69.62. Result ID: 69ef017b47f34ce924d4757d.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

Recorded evaluation configuration: {"#Query":"1"}. This record does not assert independent reproduction.

### SimA

AUC: 69.3. Result ID: 69c3d7f147f34ce924ad17f4.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"random drop (40%)"}. This record does not assert independent reproduction.

### SecMI

AUC: 68.21. Result ID: 69c3d7f147f34ce924ad17f9.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"none"}. This record does not assert independent reproduction.

### SecMIstat

AUC: 68.21. Result ID: 69ef017b47f34ce924d4757b.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6f911e209131cea46515.md>)

Recorded evaluation configuration: {"#Query":"12"}. This record does not assert independent reproduction.

### Loss

AUC: 67.49. Result ID: 69c3d7f147f34ce924ad17f7.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"none"}. This record does not assert independent reproduction.

### Loss

AUC: 67.49. Result ID: 69ef017b47f34ce924d4757c.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6ecc1e209131cea42378.md>)

Recorded evaluation configuration: {"#Query":"1"}. This record does not assert independent reproduction.

### PFAMImat

AUC: 67.44. Result ID: 69ef017b47f34ce924d4757a.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa76701e209131cea6cfec.md>)

Recorded evaluation configuration: {"#Query":"20"}. This record does not assert independent reproduction.

### PIA

AUC: 66.09. Result ID: 69c3d7f147f34ce924ad17fb.

[Reporting paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/692689c1d6b0dd334293061d.md>)

Recorded evaluation configuration: {"Filtering setting":"none"}. This record does not assert independent reproduction.

### PIA

AUC: 66.09. Result ID: 69ef017b47f34ce924d47579.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7baf1e209131cea89db2.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70c91e209131cea4d157.md>)

Recorded evaluation configuration: {"#Query":"2"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.
