Attacks to machine learning model: inferring ownership of training data (Ep. 99)

In this episode I explain a very effective technique that allows one to infer the membership of any record at hand to the (private) training dataset used to train the target model. The effectiveness of such technique is due to the fact that it works on black-box models of which there is no access to the data used for training, nor model parameters and hyperparameters. Such a scenario is very realistic and typical of machine learning as a service APIs.

This episode is supported by pryml.io, a platform I am personally working on that enables data sharing without giving up confidentiality.

As promised below is the schema of the attack explained in the episode.

References

Membership Inference Attacks Against Machine Learning Models


Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Data Science

Discord community chat

Join our Discord community to discuss the show, suggest new episodes and chat with other listeners!


Support us