MU-MIA: Machine Unlearning for Membership Inference Attacks

Summary

The paper proposes MU-MIA, a membership inference attack that uses machine unlearning to gradually reduce a model's memorization of specific samples and records a forgetting trajectory for each one. A BiLSTM-based binary classifier with attention then separates member from non-member samples using these trajectories. The unlearning step runs in a zero-shot setting that needs no real data, and the authors report that the method outperforms existing baseline attacks across different datasets and model architectures.

Topics

• Training data and privacy

Related items

• InfoProbing Local Conditional Fit for Diffusion Model Membership InferenceSimilar attack · Arxiv (cs.RO + cs.CV security)
• InfoFrom Training Exposure to Membership Evidence: A Controlled Study of OLMo 2Similar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoBeyond public access in LLM pre-training dataSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoCharacterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoDifficulty Calibration Across Time for Membership Inference in Diffusion ModelsSimilar attack · Arxiv (cs.RO + cs.CV security)