Membership Inference Attack Against Principal Component Analysis - Archive ouverte HAL Access content directly
Conference Papers Year : 2022

Membership Inference Attack Against Principal Component Analysis

(1) , (2, 3) , (1) , (2) , (1)


This paper studies the performance of membership inference attacks against principal component analysis (PCA). In this attack, we assume that the adversary has access to the principal components, and her main goal is to infer whether a given data sample was used to compute these principal components. We show that our attack is successful and achieves high performance when the number of samples used to compute the principal components is small. As a defense strategy, we investigate the use of various differentially private mechanisms. Accordingly, we present experimental results on the performance of Gaussian and Laplace mechanisms under naive and advanced compositions against MIA as well as the utility of these differentially-private PCA solutions.
Fichier principal
Vignette du fichier
publi-7041.pdf (528.73 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03779050 , version 1 (16-09-2022)



Oualid Zari, Javier Parra-Arnau, Ayşe Ünsal, Thorsten Strufe, Melek Önen. Membership Inference Attack Against Principal Component Analysis. PSD 2022, Privacy in Statistical Databases, Sep 2022, Paris, France. pp.269-282, ⟨10.1007/978-3-031-13945-1_19⟩. ⟨hal-03779050⟩
6 View
3 Download



Gmail Facebook Twitter LinkedIn More