Membership Inference Attacks Against Latent Factor Model
On the map: LLM safety and security → Membership inference attacks
Abstract (arXiv)
The advent of the information age has led to the problems of information overload and unclear demands. As an information filtering system, personalized recommendation systems predict users' behavior and preference for items and improves users' information acquisition efficiency. However, recommendation systems usually use highly sensitive user data for training. In this paper, we use the latent factor model as the recommender to get the list of recommended items, and we representing users from relevant items Compared with the traditional member inference against machine learning classifiers. We construct a multilayer perceptron model with two hidden layers as the attack model to complete the member inference. Moreover, a shadow recommender is established to derive the labeled training data for the attack model. The attack model is trained on the dataset generated by the shadow recommender and tested on the dataset generated by the target recommender. The experimental data show that the AUC index of our attack model can reach 0.857 on the real dataset MovieLens, which shows that the attack model has good performance.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 12 of its 47 references that are in the map. First posted on arXiv 15 Dec 2022.
Builds on
12 of 47 references.
Closest ancestors · 1
Same direction, newest first
Other references · 11
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2017Machine Learning Models that Remember Too Muchcited by 165
- 2018Understanding Membership Inferences on Well-Generalized Learning Modelscited by 83
- 2017Knock Knock, Who's There? Membership Inference on Aggregate Location Datacited by 63
- 2019How to Prove Your Model Belongs to You: A Blind-Watermark based Framework to Protect Intellectual Property of DNNcited by 58
- 2017Security Evaluation of Pattern Classifiers under Attackcited by 39
- 2018Towards Demystifying Membership Inference Attackscited by 39
- 2017Trajectory Recovery From Ash: User Privacy Is NOT Preserved in Aggregated Mobility Datacited by 17
Built on by
Not cited yet.