arrow
返回

Membership inference attacks against compression models

delete2023-06-19
delete1
PRE
AI
Y
Yong Jin *
W
Weidong Lou
Y
Yanghua Gao
DOI:10.1007/s00607-023-01180-ydelete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
With the rapid development of artificial intelligence, privacy threats are already getting the spotlight. One of the most common privacy threats is the membership inference attack (MIA). Existing MIAs can effectively explore the potential privacy leakage risks of deep neural networks. However, DNNs are usually compressed for practical use, especially for edge computing, MIA will fail due to changes in DNNs' structure or parameters during the compression. To address this problem, we propose CM-MIA, an MIA against compression models, which can effectively determine their privacy leakage risks before deployment. In specific, firstly we use a variety of compression methods to help build shadow models for different target models. Then, we use these shadow models to construct sample features and identify abnormal samples by calculating the distance between each sample feature. Finally, based on the hypothesis test, we determine whether the abnormal sample is a member of the training dataset. Meanwhile, only abnormal samples are used for membership inference, which reduces time costs and improves attack efficiency. Extensive experiments are conducted on 6 datasets to evaluate CM-MIA's attack capacity. The results show that CM-MIA achieves the state-of-the-art attack performance in most cases. Compared with baselines, the attack success rate of CM-MIA is increased by 10.5% on average.
Keyword:
Membership inference attack
Deep learning
Compression model
Privacy risk

期刊

C
Computing
IF:
2.8
论文数:
2.3K
被引数:
3.5K

机构

C
China National Tobacco Corporation
学者数:
3.5K
论文数: 2.4K
被引数: 2
引用论文

引用论文

Kinetic and Thermodynamic Characterization of the Common Polymorphic Variants of Human Methionine Synthase Reductase
err2004-01-29
err0
PREAI
errHoratiu Olteanu; Kirsten R. Wolthers; Andrew W. Munro; Nigel S. Scrutton; Ruma Banerjee
err分享
err收藏
err2001-01-01
err0
PREAI
errRadii M. Kadushnikov; Eugenii Yu. Nurkanov; Valerii V. Skorokhod
err分享
err收藏
err分享
err收藏
Effect of pulse duration fluctuation on the photodetection of a train of pulses from an optical frequency comb
err2018-04-01
err0
PREAI
errXiaopeng Xie; Romain Bouchand; Michele Giunta; Wolfgang Hansel; Matthias Lezius; Ronald Holzwarth; Giorgio Santarelli; Yann Le Coq
err分享
err收藏
学者 查看更多内容