Decision-based (label-only) Membership Inference Attacks

This repository contains the implementation for Membership Leakage in Label-Only Exposures (ACM CCS 2021)

Our attack is also already available on Adversarial Robustness Toolbox (ART), which is a popular Python packages for machine learning security.

Citation

@inproceedings{LZ21,
author = {Zheng Li and Yang Zhang},
title = {{Membership Leakage in Label-Only Exposures}},
booktitle = {{ACM SIGSAC Conference on Computer and Communications Security (CCS)}},
publisher = {ACM},
year = {2021}
}