FISGuard: Defending Against Membership Inference via Fixed Input Subspaces
FISGuard reduces the ProjRes attack AUC to near the random-guessing level of 0.5 in most settings, while maintaining downstream task performance close to that of the undefended model and introducing only limited computational overhead, thereby achieving a favorable privacy--utility trade-off.
Hao-Cheng Jiang, Hua Shen
· 0 citations