Discard the Dross and Select the Essential: Pre-query Sample Selection for Black-box Membership Inference Attacks

Dongdong Zhao, Jinrong Hu, Changtian Song +3

Black-box membership inference attacks (MIAs) rely on target-model queries to infer whether candidate samples were used for training. However, membership signals are highly non-uni…