Membership Inference Attacks

Also known as MIA

Ask about this topic

Overview

Membership inference attacks ask whether a particular record, person, or dataset contributed to a model’s training, helping assess privacy risks. Black-box attacks use outputs such as loss, confidence, or generated text, while white-box methods analyze gradients and internal representations; LiRA and RMIA are prominent reference-model approaches. Researchers apply these methods to language, vision, generative, recommender, and federated models, and study defenses including differential privacy, regularization, and limits on exposed signals. A central challenge is that results can change sharply with attacker access, distribution shift, and false-positive rates, so reliable audits must distinguish practical privacy risks from apparent attack success under unrealistic assumptions.

Latest papers

CardsList

116 papers15 papers in the last four weeks, up 25% on the four weeks before. 0.1% of all new papers.

  1. Auditing Training Data in Generative Music Models via Black-Box Membership Inference

    May 28, 2026Yi Chen Liu, Jiawei Yu, Kexin Cao +3Text-to-Music GenerationMembership Inference Attacks

    University of Georgia, Athens, GA, USA · Independent Researcher · University of Tennessee, Knoxville, TN, USA

  2. MRMMIA: Membership Inference Attacks on Memory in Chat Agents

    May 27, 2026Kai Chen, Yan Pang, Tianhao WangData LeakageMembership Inference Attacks

    University of Virginia

  3. Detectability without Interference: Efficient Canary Design for Privacy Auditing in One Run

    May 26, 2026Mathieu Dagréou, Valentin Dorseuil, Mohammad Yaghini +2Privacy AuditingMembership Inference Attacks

    PreMeDICaL team, Inria Idesp, Inserm, Univ. de Montpellier

  4. Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Models

    May 26, 2026Tao Qi, Huili Wang, Yuanhong Huang +6Membership Inference AttacksDiffusion-Based Image Generation

    Beijing University of Posts and Telecommunications · Tsinghua University

  5. On Reliability of Membership Inference Vulnerability Evaluation

    May 25, 2026Joonas Jälkö, Gauri Pradhan, Ossi Räisä +1Data LeakagePrivacy Auditing

    University of Helsinki, Finland · CISPA Helmholtz Center for Information Security, Germany

  6. Boundary-targeted Membership Inference Attacks on Safety Classifiers

    May 21, 2026Anthony Hughes, Alexander Goldberg, Prince Jha +3Membership Inference AttacksPrivacy Leakage in Language Models

    University of Sheffield · Carnegie Mellon University · MBZUAI

  7. Auditing Privacy in Multi-Tenant RAG under Account Collusion

    May 19, 2026Florian A. D. BurnatData LeakagePrivacy Auditing

    University of Bath, Bath, UK.

  8. Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment

    May 17, 2026Jiaqing Li, Yajuan Lu, Xiaochuan Shi +3Membership Inference AttacksPrivacy Protection in VLMs

    1Wuhan University · 2Tarim University

  9. Membership Inference Attacks on Discrete Diffusion Language Models

    May 15, 2026Shailesh KasivelrajanMasked Diffusion ModelsMembership Inference Attacks

    Indian Institute of Technology Madras

  10. ReMIA: a Powerful and Efficient Alternative to Membership Inference Attacks against Synthetic Data Generators

    May 14, 2026Davide Scassola, Andrea Coser, Sebastiano SaccaniMembership Inference AttacksSynthetic Tabular Data Generation

    Aindo SpA Trieste, Italy

  11. DistractMIA: Black-Box Membership Inference on Vision-Language Models via Semantic Distraction

    May 12, 2026Hongyi Tang, Zhihao Zhu, Yi YangVision-Language ModelsMembership Inference Attacks

    The Hong Kong University of Science and Technology

  12. FERMI: Exploiting Relations for Membership Inference Against Tabular Diffusion Models

    May 12, 2026Abtin Mahyar, Masoumeh Shafieinejad, Yuhan Liu +1Membership Inference AttacksTabular Diffusion Models

    University of Waterloo · Vector Institute

  13. JUMP: Efficient Membership Inference on Fine-Tuned Diffusion Language Models

    May 9, 2026Yeachan Jun, Albert NoMembership Inference AttacksPrivacy Leakage in Language Models

    Department of Artificial Intelligence Yonsei University, Seoul, Korea

  14. On Privacy Leakage in Tabular Diffusion Models: Influential Factors, Attacker Knowledge, and Metrics

    May 7, 2026Masoumeh Shafieinejad, D. B. Emerson, Behnoosh Zamanlooy +5Data LeakageMembership Inference Attacks

    Vector Institute · McMaster University · University of Toronto +1

  15. Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering

    May 5, 2026Tejas Kulkarni, Antti Koskela, Laith ZumotIn-Context RetrievalMembership Inference Attacks

    Nokia Bell Labs · Nokia

  16. On the Privacy of LLMs: An Ablation Study

    May 4, 2026Karima Makhlouf, Lamiaa Basyoni, Syed Khaderi +4LLM Backdoor AttacksMembership Inference Attacks

    UDST, Doha, Qatar

  17. E-MIA: Exam-Style Black-Box Membership Inference Attacks against RAG Systems

    May 1, 2026Zelin Guan, Shengda Zhuo, Zeyan Li +4Membership Inference AttacksPrivacy Leakage in Language Models

    College of Cyber Security, Jinan University, Guangzhou, China · School of Computer Science, Shanghai Jiaotong University, Shanghai, China · Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing 100191, China +1

  18. Toward Efficient Membership Inference Attacks against Federated Large Language Models: A Projection Residual Approach

    Apr 23, 2026Guilin Deng, Silong Chen, Yuchuan Luo +6Membership Inference AttacksPrivacy Leakage in Language Models

    Colleague of Computer Science and Technology, National University of Defense Technology, Changsha, China · City University of Hong Kong, Hong Kong, China · Shenzhen University, Shenzhen, China

  19. Generalization and Membership Inference Attack a Practical Perspective

    Apr 21, 2026Fateme Rahmani, Mahdi Jafari Siavoshani, Mohammad Hossein RohbanNeural Network GeneralizationMembership Inference Attacks

    Department of Computer Engineering Sharif University of Technology Tehran, Iran

  20. A Dual Perspective on Synthetic Trajectory Generators: Utility Framework and Privacy Vulnerabilities

    Apr 21, 2026Aya Cherigui, Florent Guépin, Arnaud Legendre +1Membership Inference AttacksSynthetic Data Generation

    Orange Research, Belfort, France · Université Marie et Louis Pasteur, CNRS, institut FEMTO-ST (UMR 6174), F-25000 Besançon, France

  21. Detecting Data Contamination in Large Language Models

    Apr 21, 2026Juliusz Janicki, Savvas Chamezopoulos, Evangelos Kanoulas +1Membership Inference AttacksLLM Auditing

    University of Amsterdam · Elsevier

  22. Evaluating Differential Privacy Against Membership Inference in Federated Learning: Insights from the NIST Genomics Red Team Challenge

    Apr 14, 2026Gustavo de Carvalho BertoliMembership Inference AttacksDifferentially Private Federated Learning

  23. CoLA: A Choice Leakage Attack Framework to Expose Privacy Risks in Subset Training

    Apr 14, 2026Qi Li, Cheng-Long Wang, Yinzhi Cao +1Privacy-Preserving MLMembership Inference Attacks

    King Abdullah University of Science and Technology · Provable Responsible AI and Data Analytics Lab · National University of Singapore +1

  24. Membership Inference Attacks Expose Participation Privacy in ECG Foundation Encoders

    Apr 12, 2026Ziyu Wang, Elahe Khatibi, Ankita Sharma +4Membership Inference AttacksPrivacy Auditing

    University of California, Irvine Irvine, California, United States · Arizona State University Tempe, Arizona, United States · California State University, Dominguez Hills Carson, California, United States

  25. Learning the Signature of Memorization in Autoregressive Language Models

    Apr 3, 2026David Ilić, Kostadin Cvejoski, David Stanojević +1Membership Inference AttacksPrivacy Leakage in Language Models

    JetBrains Research

  26. A Unified Perspective on Adversarial Membership Manipulation in Vision Models

    Apr 3, 2026Ruize Gao, Kaiwen Zhou, Yongqiang Chen +1Membership Inference AttacksAdversarial Robustness

    Knowin AI · The Chinese University of Hong Kong · The University of Melbourne

  27. AutoMIA: Improved Baselines for Membership Inference Attack via Agentic Self-Exploration

    Apr 1, 2026Ruhao Liu, Weiqi Huang, Qi Li +1Membership Inference AttacksBlack-Box Model Auditing

    National University of Singapore

  28. G-Drift MIA: Membership Inference via Gradient-Induced Feature Drift in LLMs

    Apr 1, 2026Ravi Ranjan, Utkarsh Grover, Xiaomin Lin +1Membership Inference AttacksPrivacy Leakage in Language Models

    Florida International University, Miami, USA · University of South Florida, Tampa, USA

  29. ReproMIA: A Comprehensive Analysis of Model Reprogramming for Proactive Membership Inference Attacks

    Mar 30, 2026Chihan Huang, Huaijin Wang, Shuai WangMembership Inference AttacksPrivacy Leakage in Language Models

    HKUST, Hong Kong, China

  30. Membership Inference Attacks against Large Audio Language Models

    Mar 30, 2026Jia-Kai Dong, Yu-Xiang Lin, Hung-Yi LeeMembership Inference AttacksPrivacy Leakage in Language Models

    National Taiwan University · NTU Artificial Intelligence Center of Research Excellence