Calibrating One-Round Membership Inference with Neighbors

Francesco Rita, Jie Zhang, Florian Tramèr

The state-of-the-art Membership Inference (MI) methods calibrate their signal separately for each example using reference models, auxiliary models trained to exclude the target. Th…