Some Targets Are Harder to Identify than Others: Quantifying the Target-dependent Membership Leakage

Achraf Azize, Debabrota Basu

In a Membership Inference (MI) game, an attacker tries to infer whether a target point was included or not in the input of an algorithm. Existing works show that some target points…