Membership Inference Attacks and Defenses in Classification Models

Jiacheng Li, Ninghui Li, Bruno Ribeiro

We study the membership inference (MI) attack against classifiers, where the attacker's goal is to determine whether a data instance was used for training the classifier. Through s…