ML Privacy

Please Tell Me More: Privacy Impact of Explainability through the Lens of Membership Inference Attack
(IEEE SP 2024) We proposed a perturbation-based membership inference attack against image classification models, leveraging importance of pixels as indicated by attribution maps from XAI techniques (e.g., GradCAM, LIME, SHAP).
Han Liu, Yuhao Wu, Zhiyuan Yu, Ning Zhang
DOI PDF
Please Tell Me More: Privacy Impact of Explainability through the Lens of Membership Inference Attack