Fundamental Limits of Membership Inference Attacks on Machine Learning Models - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2024

Fundamental Limits of Membership Inference Attacks on Machine Learning Models

Résumé

Membership inference attacks (MIA) can reveal whether a particular data point was part of the training dataset, potentially exposing sensitive information about individuals. This article provides theoretical guarantees by exploring the fundamental statistical limitations associated with MIAs on machine learning models. More precisely, we first derive the statistical quantity that governs the effectiveness and success of such attacks. We then deduce that in a very general regression setting with overfitting algorithms, attacks may have a high probability of success. Finally, we investigate several situations for which we provide bounds on this quantity of interest. Our results enable us to deduce the accuracy of potential attacks based on the number of samples and other structural parameters of learning models. In certain instances, these parameters can be directly estimated from the dataset.
Fichier principal
Vignette du fichier
2310.13786.pdf (340.41 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04431183 , version 1 (01-02-2024)

Identifiants

Citer

Eric Aubinais, Elisabeth Gassiat, Pablo Piantanida. Fundamental Limits of Membership Inference Attacks on Machine Learning Models. 2024. ⟨hal-04431183⟩
50 Consultations
17 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More