Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Leveraging Adversarial Examples to Quantify Membership Information
  Leakage   The use of personal data for training machine learning systems comes with a
privacy threat and measuring the level of privacy of a model is one of the
major challenges in machine learning today. Identifying training data based on
a trained model is a standard way of measuring the privacy risks induced by the
model. We develop a novel approach to address the problem of membership
inference in pattern recognition models, relying on information provided by
adversarial examples. The strategy we propose consists of measuring the
magnitude of a perturbation necessary to build an adversarial example. Indeed,
we argue that this quantity reflects the likelihood of belonging to the
training data. Extensive numerical experiments on multivariate data and an
array of state-of-the-art target models show that our method performs
comparable or even outperforms state-of-the-art strategies, but without
requiring any additional training samples.

12
The categories of this paper are: nucl-th
25
The categories of this paper are: patt-sol
15
The categories of this paper are: nucl-ex
21
The categories of this paper are: adap-org
37
The categories of this paper are: supr-con
10
The categories of this paper are: q-bio
19
The categories of this paper are: eess
8
The categories of this paper are: hep-ex
13
The categories of this paper are: quant-ph
6
The categories of this paper are: astro-ph
7
The categories of this paper are: hep-th
18
The categories of this paper are: econ
27
The categories of this paper are: comp-gas
14
The categories of this paper are: math-ph
28
The categories of this paper are: alg-geom
2
The categories of this paper are: math