Membership Inference Attack on TinyImageNet 200
79Balanced AccuracyDATM
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| DATMModel Arch.=ConvNet, IPC=502026.03 | 79 | 87 | 15.9 | |
| DATMModel Arch.=VGG11-BN, IPC=502026.03 | 79 | 87 | 12.8 | |
| SelMatchModel Arch.=ConvNet, IPC=502026.03 | 79 | 87 | 18.3 | |
| SelMatchModel Arch.=ResNet18, IPC=502026.03 | 79 | 87 | 16.1 | |
| SelMatchModel Arch.=VGG11-BN, IPC=502026.03 | 79 | 87 | 19.7 | |
| DATMModel Arch.=AlexNet, IPC=502026.03 | 78 | 86 | 13.2 | |
| DATMModel Arch.=ResNet18, IPC=252026.03 | 78 | 85 | 13.2 | |
| DATMModel Arch.=ResNet18, IPC=502026.03 | 78 | 86 | 14.8 | |
| SelMatchModel Arch.=AlexNet, IPC=502026.03 | 78 | 86 | 17 | |
| SelMatchModel Arch.=ResNet18, IPC=252026.03 | 78 | 86 | 12.3 | |
| SeqMatchModel Arch.=AlexNet, IPC=502026.03 | 78 | 86 | 13.7 | |
| DATMModel Arch.=ConvNet, IPC=252026.03 | 77 | 85 | 11.4 | |
| DATMModel Arch.=AlexNet, IPC=252026.03 | 77 | 85 | 11.1 | |
| SelMatchModel Arch.=ConvNet, IPC=252026.03 | 77 | 85 | 12.8 | |
| SelMatchModel Arch.=VGG11-BN, IPC=252026.03 | 77 | 85 | 15.4 | |
| SeqMatchModel Arch.=ConvNet, IPC=502026.03 | 77 | 84 | 11.5 | |
| SeqMatchModel Arch.=ResNet18, IPC=502026.03 | 77 | 86 | 9.7 | |
| DATMModel Arch.=VGG11-BN, IPC=252026.03 | 76 | 84 | 9.3 | |
| SelMatchModel Arch.=AlexNet, IPC=252026.03 | 76 | 85 | 13.1 | |
| SeqMatchModel Arch.=ResNet18, IPC=252026.03 | 76 | 83 | 7.4 | |
| SeqMatchModel Arch.=VGG11-BN, IPC=252026.03 | 76 | 84 | 10.6 | |
| SeqMatchModel Arch.=VGG11-BN, IPC=502026.03 | 76 | 84 | 10.3 | |
| SelMatchModel Arch.=ConvNet, IPC=102026.03 | 75 | 83 | 10.5 | |
| SelMatchModel Arch.=ResNet18, IPC=102026.03 | 75 | 83 | 9.1 | |
| SeqMatchModel Arch.=AlexNet, IPC=252026.03 | 75 | 83 | 9.6 | |
| FTDModel Arch.=ConvNet, IPC=502026.03 | 74 | 82 | 7.3 | |
| FTDModel Arch.=ResNet18, IPC=252026.03 | 74 | 82 | 9.1 | |
| FTDModel Arch.=ResNet18, IPC=502026.03 | 74 | 81 | 9.2 | |
| FTDModel Arch.=VGG11-BN, IPC=502026.03 | 74 | 82 | 7.3 | |
| SelMatchModel Arch.=AlexNet, IPC=102026.03 | 74 | 82 | 6.7 | |
| SelMatchModel Arch.=VGG11-BN, IPC=102026.03 | 74 | 82 | 9.3 | |
| SeqMatchModel Arch.=ConvNet, IPC=252026.03 | 74 | 82 | 9.3 | |
| FTDModel Arch.=VGG11-BN, IPC=252026.03 | 73 | 81 | 6.7 | |
| DATMModel Arch.=AlexNet, IPC=102026.03 | 73 | 80 | 7 | |
| SeqMatchModel Arch.=AlexNet, IPC=102026.03 | 73 | 80 | 7.6 | |
| FTDModel Arch.=ConvNet, IPC=252026.03 | 72 | 80 | 8.3 | |
| FTDModel Arch.=AlexNet, IPC=502026.03 | 72 | 79 | 5.7 | |
| DATMModel Arch.=ConvNet, IPC=102026.03 | 72 | 79 | 4.1 | |
| DATMModel Arch.=ResNet18, IPC=102026.03 | 72 | 79 | 5.2 | |
| SeqMatchModel Arch.=VGG11-BN, IPC=102026.03 | 72 | 79 | 7.7 | |
| MTTModel Arch.=ConvNet, IPC=502026.03 | 71 | 78 | 3.3 | |
| MTTModel Arch.=ResNet18, IPC=502026.03 | 71 | 78 | 3.5 | |
| FTDModel Arch.=AlexNet, IPC=252026.03 | 71 | 77 | 5.6 | |
| DATMModel Arch.=VGG11-BN, IPC=102026.03 | 71 | 78 | 3.8 | |
| SeqMatchModel Arch.=ConvNet, IPC=102026.03 | 71 | 79 | 5.2 | |
| SeqMatchModel Arch.=ResNet18, IPC=102026.03 | 71 | 77 | 3.8 | |
| MTTModel Arch.=AlexNet, IPC=502026.03 | 70 | 77 | 2.8 | |
| FTDModel Arch.=ResNet18, IPC=102026.03 | 70 | 77 | 4.5 | |
| MTTModel Arch.=VGG11-BN, IPC=502026.03 | 69 | 75 | 3.7 | |
| FTDModel Arch.=AlexNet, IPC=102026.03 | 69 | 76 | 2.5 | |
| MTTModel Arch.=ConvNet, IPC=252026.03 | 68 | 75 | 1.8 | |
| MTTModel Arch.=ResNet18, IPC=252026.03 | 68 | 74 | 2.2 | |
| FTDModel Arch.=VGG11-BN, IPC=102026.03 | 68 | 74 | 3.2 | |
| MTTModel Arch.=VGG11-BN, IPC=252026.03 | 67 | 74 | 2.8 | |
| MTTModel Arch.=AlexNet, IPC=252026.03 | 66 | 71 | 1.6 | |
| MTTModel Arch.=ConvNet, IPC=102026.03 | 65 | 70 | 0.7 | |
| FTDModel Arch.=ConvNet, IPC=102026.03 | 65 | 71 | 3.6 | |
| MTTModel Arch.=AlexNet, IPC=102026.03 | 63 | 68 | 1.3 | |
| MTTModel Arch.=ResNet18, IPC=102026.03 | 62 | 69 | 0.9 | |
| MTTModel Arch.=VGG11-BN, IPC=102026.03 | 61 | 66 | 1 |