ResearchBenchmarksMembership Inference Attack on RAR (belonging) vs. Taming (non-belonging)Membership Inference Attack on RAR (belonging) vs. Taming (non-belonging)Follow100TPR@1%FPRCFG-Diff99.89699.92399.9599.977Jun 22, 2026Evaluation resultsMethodMethodLinksTPR@1%FPRCFG-DiffOriginal Model=RAROriginal Model=RAR2026.06100ICASOriginal Model=RAROriginal Model=RAR2026.0699.9OursOriginal Model=RAROriginal Model=RAR2026.0699.9