Survey on Membership Inference Attacks Against Machine Learning

• Published in: Ji suan ji ke xue Vol. 50; no. 3; pp. 351 - 359
• Main Authors: Peng, Yuefeng, Zhao, Bo, Liu, Hui, An, Yang
• Format: Journal Article
• Language: Chinese
• Published: Chongqing Guojia Kexue Jishu Bu 01.03.2023; Editorial office of Computer Science
• Subjects: Computer vision; Inference; Machine learning; machine learning|membership inference|privacy leakage|privacy protection; Natural language processing; Privacy; Training
• DOI: 10.11896/jsjkx.220100016
• ISSN: 1002-137X

In recent years, machine learning has not only achieved remarkable results in conventional fields such as computer vision and natural language processing, but also been widely applied to process sensitive data such as face images, financial data and medical information.Recently, researchers find that machine learning models will remember the data in their training sets, making them vulnerable to membership inference attacks, that is, the attacker can infer whether the given data exists in the training set of a specific machine learning model.The success of membership inference attacks may lead to serious individual privacy leakage.For example, the existence of a patient's medical record in a hospital's analytical training set reveals that the patient was once a patient there.The paper first introduces the basic principle of membership inference attacks, and then systematically summarizes and classifies the representative research achievements on membership inference attacks and defenses in recent years.In par