Francesco Rita

Calibrating One-Round Membership Inference with Neighbors

A key observation is that reference models serve only to reveal how an example behaves under models not trained on it, and that querying the target model on nearby samples yields the same information, and that querying the target model on nearby samples yields the same information.