Najeeb Ullah

apcMIA: Adaptive Perturbation-assisted Contrastive Membership Inference Attacks

Membership inference becomes especially difficult when target models generalize well or are trained with defenses, since member and non-member posterior vectors often overlap substantially in the low-false-positive-rate regime. We present apcMIA, a strict black-box, single-query membership inference attack that operate...