# Membership Inference Attack on Mini-ImageNet (test)

Source: [Membership Inference Attack on Mini-ImageNet (test)](<https://www.sota2.com/research/sota/membership-inference-attack-on-mini-imagenet-test>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-05-29T09:33:25.028Z

Evaluation of a model's susceptibility to Membership Inference Attacks (MIA) conducted on the test split of the Mini-ImageNet dataset, typically measured using metrics like Attack Success Rate (ASR), AUC, and TPR@1%FPR.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Membership Inference Attack |
| Dataset (including any stated split) | Mini-ImageNet (test) |
| Metric | Attack Success Rate (ASR) |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 6 of 6 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Attack Success Rate (ASR)](<https://www.sota2.com/research/sota/membership-inference-attack-on-mini-imagenet-test.md?metric=Attack%20Success%20Rate%20(ASR)>): Higher is better; unit: PERCENT.

- [AUC](<https://www.sota2.com/research/sota/membership-inference-attack-on-mini-imagenet-test.md?metric=AUC>): Higher is better; unit: PERCENT.

- [TPR @ 1% FPR](<https://www.sota2.com/research/sota/membership-inference-attack-on-mini-imagenet-test.md?metric=TPR%20%40%201%25%20FPR>): Higher is better; unit: PERCENT.

## Recorded results

| Method | Attack Success Rate (ASR) | Result date | Report paper |
| --- | --- | --- | --- |
| PIA+F | 84.13 | Not recorded | 68fa7ba21e209131cea897f8 |
| SecMI+F | 83.98 | Not recorded | 68fa7ba21e209131cea897f8 |
| SecMI | 77.73 | Not recorded | 68fa7ba21e209131cea897f8 |
| Naive+F | 77.23 | Not recorded | 68fa7ba21e209131cea897f8 |
| PIA | 75.63 | Not recorded | 68fa7ba21e209131cea897f8 |
| Naive | 71.43 | Not recorded | 68fa7ba21e209131cea897f8 |

### PIA+F

Attack Success Rate (ASR): 84.13. Result ID: 6a195d48fbc373592c141071.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

Recorded evaluation configuration: {"Target Model":"DiT","Training Epochs":"1400","Image Resolution":"256x256","Member Samples":"25,000","Hold-out Samples":"25,000","Module":"high-frequency filter module"}. This record does not assert independent reproduction.

### SecMI+F

Attack Success Rate (ASR): 83.98. Result ID: 6a195d48fbc373592c14106f.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

Recorded evaluation configuration: {"Target Model":"DiT","Training Epochs":"1400","Image Resolution":"256x256","Member Samples":"25,000","Hold-out Samples":"25,000","Module":"high-frequency filter module"}. This record does not assert independent reproduction.

### SecMI

Attack Success Rate (ASR): 77.73. Result ID: 6a195d48fbc373592c14106e.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6f911e209131cea46515.md>)

Recorded evaluation configuration: {"Target Model":"DiT","Training Epochs":"1400","Image Resolution":"256x256","Member Samples":"25,000","Hold-out Samples":"25,000"}. This record does not assert independent reproduction.

### Naive+F

Attack Success Rate (ASR): 77.23. Result ID: 6a195d48fbc373592c14106d.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

Recorded evaluation configuration: {"Target Model":"DiT","Training Epochs":"1400","Image Resolution":"256x256","Member Samples":"25,000","Hold-out Samples":"25,000","Module":"high-frequency filter module"}. This record does not assert independent reproduction.

### PIA

Attack Success Rate (ASR): 75.63. Result ID: 6a195d48fbc373592c141070.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70c91e209131cea4d157.md>)

Recorded evaluation configuration: {"Target Model":"DiT","Training Epochs":"1400","Image Resolution":"256x256","Member Samples":"25,000","Hold-out Samples":"25,000"}. This record does not assert independent reproduction.

### Naive

Attack Success Rate (ASR): 71.43. Result ID: 6a195d48fbc373592c14106c.

[Reporting paper](<https://www.sota2.com/research/paper/68fa7ba21e209131cea897f8.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6ecc1e209131cea42378.md>)

Recorded evaluation configuration: {"Target Model":"DiT","Training Epochs":"1400","Image Resolution":"256x256","Member Samples":"25,000","Hold-out Samples":"25,000"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.