ResearchBenchmarksMembership Inference Attack on VAR (belonging) vs. RAR (non-belonging)Follow100TPR@1%FPROurs13.05635.62858.280.772Jun 22, 2026Evaluation ResultsMethodMethodLinksTPR@1%FPROursOriginal Model=VAROriginal Model=VAR2026.06100ICASOriginal Model=VAROriginal Model=VAR2026.0644.7CFG-DiffOriginal Model=VAROriginal Model=VAR2026.0616.4