{"id":"W3046102592","doi":"10.48550/arxiv.2007.14321","title":"Label-Only Membership Inference Attacks","year":2020,"lang":"en","type":"preprint","venue":"arXiv (Cornell University)","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":98,"is_retracted":false,"has_abstract":true,"ca_institutions":"Vector Institute; University of Toronto","funders":"","keywords":"Inference; Computer science; Exploit; Outlier; Adversary; Robustness (evolution); Machine learning; Data mining; Low Confidence; Artificial intelligence; Computer security; Psychology","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0003273645,0.0005174793,0.0005322793,0.0002375055,0.0002418891,0.0002401959,0.004487195,0.0004653552,0.000132305],"category_scores_gemma":[0.0003839522,0.0006331828,0.0002220512,0.0009841925,0.0002073798,0.0006416062,0.006830317,0.001993526,0.0004455977],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002756527,"about_ca_system_score_gemma":0.0006250473,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000169067,"about_ca_topic_score_gemma":0.00004240874,"domain_scores_codex":[0.9967648,0.0003698161,0.000285106,0.001820859,0.0002058946,0.0005535611],"domain_scores_gemma":[0.9969685,0.0003652502,0.0004213049,0.001698546,0.0001939683,0.0003524029],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002776417,0.00005527847,0.006345977,0.0001231237,0.0001064393,0.0007673691,0.0006552404,0.4563873,0.00001543332,0.5337114,0.0004529898,0.001351731],"study_design_scores_gemma":[0.0005852014,0.00006328218,0.0008336314,0.0001245542,0.00007498534,0.000006930065,0.0000763059,0.9077459,0.00003099719,0.08834968,0.001331766,0.000776767],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.0334087,0.00004580684,0.9514843,0.001019159,0.001136539,0.0002805649,0.000009223712,0.0008531283,0.01176253],"genre_scores_gemma":[0.9845088,0.00006022332,0.01343004,0.0003901877,0.0002172939,8.162814e-7,0.00001956458,0.00003591598,0.001337185],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9511001,"threshold_uncertainty_score":0.999612,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.140592867580672,"score_gpt":0.2412268005431942,"score_spread":0.1006339329625223,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}