arXiv preprint ·
SoK: Rethinking Membership Inference in Tabular Machine Learning
- Published
- Source
- arXiv preprint, posted before peer review
- Published in
- arXiv
- DOI
- 10.48550/arxiv.2610.18486
- Original
- Read it at arXiv
- Cited by
- 0 works, as OpenAlex counts them
- Topics
In brief
The Privacy Risk Hiding in Tabular Data
The authors propose a new taxonomy for membership inference attacks and systematically examine four state-of-the-art attacks across tabular datasets and model architectures. They find that dataset structure and target-model knowledge affect attack vulnerability, and that records with unique signatures can remain vulnerable even when common defenses are applied.
What they found: The study evaluates four state-of-the-art attacks across diverse tabular datasets and model architectures. It reports greater susceptibility in datasets with higher class granularity and a larger majority-class percentage. Advanced attacks depend strongly on adversarial knowledge of the target model, while reference model-free attacks can achieve statistically comparable results.
AI-written summary. Check anything you rely on against the original paper.
Abstract
Membership Inference Attacks (MIAs) are currently the dominant approach to evaluating privacy in machine learning applications. Despite their significance, several concerns remain unexplored, particularly with regard to tabular data. Existing evaluations focus predominantly on high-dimensional datasets, leaving the privacy behavior of small-to-medium datasets unexplored. In this paper, we present a new taxonomy for MIAs and conduct a comprehensive study of the factors influencing vulnerability. We evaluate four distinct state-of-the-art attacks across diverse tabular datasets and model architectures. Our results show that datasets with higher class granularity and majority class percentage are more susceptible to MIAs. We further demonstrate that advanced MIAs are highly dependent on adversarial knowledge of the target model, while reference model-free attacks often achieve statistically comparable results. Most importantly, we show that records with unique signatures (single-outs) remain highly vulnerable, even when common defenses are applied. These findings indicate that current defenses reduce average leakage, but fail to adequately protect the most sensitive individuals.
The authors’ abstract, as arXiv lists it. arXiv’s listings, abstracts included, are free for anyone to reuse.
Read it on ReadSearch
Each opens after you create an account, and brings you back to this paper.
More in Machine Learning
Foundation Models for Event Prediction Across Heterogeneous Event Logs
TopicMerge: A Divide and Conquer Approach to Topic Modeling
Merit: Making every modality earn its contribution in multimodal attention decoding
Why don't Graph Transformers attend to the same token?
CÆNL: Collapse-Based Active Neural Learning with Objective-Aligned Representation Control
Get the few papers worth your time in Machine Learning every morning.
ReadSearch reads the new papers in your field each day and brings you the few worth reading, each with its key finding in a sentence.