Quantifying Membership Inference Vulnerability via Generalization Gap and Other Model Metrics

Jason W. Bentley, Daniel Gibney, Gary Hoppenworth +1

We demonstrate how a target model's generalization gap leads directly to an effective deterministic black box membership inference attack (MIA). This provides an upper bound on how…