{"id":"W4408750188","doi":"10.14722/ndss.2025.230041","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","year":2025,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; Inference; Artificial intelligence; Deep learning; Machine learning","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001417384,0.0001914628,0.0002694759,0.0004429533,0.0001265424,0.0001583165,0.001154459,0.00009138745,0.0000593487],"category_scores_gemma":[0.0005803279,0.0001873198,0.0000572272,0.001468343,0.00002086029,0.000703673,0.000953744,0.0005952192,0.00007347422],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001247365,"about_ca_system_score_gemma":0.0000934215,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0005515989,"about_ca_topic_score_gemma":0.000259224,"domain_scores_codex":[0.997794,0.0005319888,0.000329461,0.0006349765,0.0002594438,0.0004501358],"domain_scores_gemma":[0.9983817,0.0009201636,0.00005166749,0.0004592768,0.0000837368,0.000103473],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000006661665,0.000009934899,0.001620542,0.00001091256,0.000006313217,0.000006805858,0.002513157,0.7295422,0.00004495267,0.1786246,0.00002588445,0.08758805],"study_design_scores_gemma":[0.0002639526,0.00002856782,0.0007809923,0.0000422837,0.000002825411,0.000001095282,0.0002337379,0.9583932,0.0001122298,0.03798004,0.001964069,0.0001970718],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.001313977,0.00003091733,0.9256389,0.00158194,0.0001301207,0.0001826579,1.351783e-7,0.0002885961,0.07083274],"genre_scores_gemma":[0.4761641,0.00000161012,0.5192012,0.0005428477,0.000008256951,0.00002177453,5.04744e-7,0.000005242631,0.004054498],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.4748501,"threshold_uncertainty_score":0.7638679,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.085488134606355,"score_gpt":0.3513555767616686,"score_spread":0.2658674421553136,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}