AI Grimoire
06 — siblings
evasion/poisoning/
privacy/
stealing/agents/

Adversarial ML / privacy

Privacy

Models memorise, and memorisation is detectable. The question these entries formalise is how confidently an adversary can decide whether a particular record was in the training set.

1 entry.

Entries

06.03.1
Membership Inferencecommon
Distinguish training members from held-out data via loss calibration.
O(N)