-
Notifications
You must be signed in to change notification settings - Fork 100
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Attack S and Attack P cant be reproduced #104
Comments
Hi @xjc1234567 , The attacks S and P are incorporated in the shadow_metric and population_metric function respectively in the privacy meter (see here). To get more details of how these attacks are executed, please consult the files shadow_metric.ipynb and population_metric.ipynb. |
Thank you for your answer, but I have one more question here. I did not find the training details of the target model for attack S,P,R,D such as hyperparameters because the paper provided at the conference did not include appendix. arXiv provided the paper with the training details but the data is quite different from the conference version. Can you provide me more training details about the target model to reproduce your attack? |
Hi @xjc1234567, the hyperparameters for training the shadow models in attack S are the same as the hyperparameters for reference models in attack R. Additionally, an example for replicating attack P on cifar-10 in the table of the paper can be found here https://github.com/privacytrustlab/ml_privacy_meter/tree/master/benchmark |
Hi, I noticed that the detailed implementation of attack S and attack P was not given in the source code of Enhanced MIA, how can I find them?
The text was updated successfully, but these errors were encountered: