Membership Privacy Estimation on CiteSeer 50% nodes sampled
3.7P5 EstimateBMP-R
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 3.7 | 3.8 | 4 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 3.8 | 3.8 | 3.9 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 4.2 | 4.2 | 4.3 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 4.3 | 4.6 | 5 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 4.3 | 4.5 | 4.9 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 4.3 | 4.5 | 4.9 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 4.4 | 4.6 | 5.1 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 4.4 | 4.4 | 4.4 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 4.5 | 4.8 | 5.1 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 4.5 | 4.8 | 5 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 4.6 | 4.9 | 5.3 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 4.6 | 4.8 | 5 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 4.6 | 4.8 | 5.1 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 4.6 | 4.9 | 5.3 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 4.6 | 4.9 | 5.3 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 4.7 | 5.1 | 6.3 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 5 | 5.6 | 7.4 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 5.1 | 5.4 | 6.6 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 5.5 | 6.2 | 8.1 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 5.5 | 6.3 | 8.4 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 5.7 | 6.3 | 7.7 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 5.7 | 6.1 | 6.9 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 5.7 | 6.3 | 7.7 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 5.7 | 6.1 | 6.9 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 5.7 | 6.5 | 8.9 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 5.7 | 6.6 | 8.7 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 6.5 | 8 | 10 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 6.6 | 8 | 11 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 7.1 | 8.4 | 11 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 7.1 | 8.4 | 11 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 7.1 | 8.4 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 7.2 | 8.6 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 7.2 | 8.5 | 11 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 7.3 | 8.7 | 11 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 7.3 | 8.5 | 11 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 7.5 | 8.9 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 7.6 | 9 | 11 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 7.7 | 9 | 11 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 7.9 | 9.2 | 11 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 8 | 9.5 | 12 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 8.3 | 9.7 | 12 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 8.3 | 9.7 | 12 | |
| BMP-RSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 8.5 | 9.9 | 12 | |
| BMP-RSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 8.5 | 9.8 | 12 | |
| BMP-RSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 8.7 | 10 | 12 | |
| MPSampling Strategy=random, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 8.8 | 10 | 12 | |
| MPSampling Strategy=random, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 8.8 | 10 | 12 | |
| BMP-RSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 9 | 10 | 13 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 11 | 13 | 15 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 11 | 13 | — | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=noisy, Model Architecture=GAT, Edge Configuration=no edges2026.06 | 11 | 12 | 14 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 12 | 13 | 15 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 12 | 13 | 15 | |
| MPSampling Strategy=snowball, Decision Type=weak, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 12 | 13 | 15 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=full edge2026.06 | 12 | 13 | 15 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GCN, Edge Configuration=no edges2026.06 | 12 | 13 | 15 | |
| MPSampling Strategy=snowball, Decision Type=strong, Output Type=clean, Model Architecture=GAT, Edge Configuration=full edge2026.06 | 12 | 13 | 15 |