Researchers have introduced TMIA, a novel black-box attack designed to infer temporal membership in continually updated deep learning models. This attack aims to determine if and when specific data samples were used during model training, operating at both timestamp and interval levels. TMIA utilizes bidirectional LSTMs to analyze model outputs across successive updates, demonstrating significant effectiveness over existing methods in experiments with language and image classification models. The study also explores potential defenses, highlighting the inherent trade-off between privacy and model utility. AI
IMPACT This research highlights a new privacy risk in continually updated AI models, potentially influencing future development and defense strategies.
RANK_REASON The cluster contains an academic paper detailing a new method for inferring temporal membership in machine learning models. [lever_c_demoted from research: ic=1 ai=1.0]
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →