Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Membership Privacy for Machine Learning Models Through Knowledge
  Transfer   Large capacity machine learning (ML) models are prone to membership inference
attacks (MIAs), which aim to infer whether the target sample is a member of the
target model's training dataset. The serious privacy concerns due to the
membership inference have motivated multiple defenses against MIAs, e.g.,
differential privacy and adversarial regularization. Unfortunately, these
defenses produce ML models with unacceptably low classification performances.
Our work proposes a new defense, called distillation for membership privacy
(DMP), against MIAs that preserves the utility of the resulting models
significantly better than prior defenses. DMP leverages knowledge distillation
to train ML models with membership privacy. We provide a novel criterion to
tune the data used for knowledge transfer in order to amplify the membership
privacy of DMP. Our extensive evaluation shows that DMP provides significantly
better tradeoffs between membership privacy and classification accuracies
compared to state-of-the-art MIA defenses. For instance, DMP achieves ~100%
accuracy improvement over adversarial regularization for DenseNet trained on
CIFAR100, for similar membership privacy (measured using MIA risk): when the
MIA risk is 53.7%, adversarially regularized DenseNet is 33.6% accurate, while
DMP-trained DenseNet is 65.3% accurate.

35
The categories of this paper are: mtrl-th
31
The categories of this paper are: ao-sci
34
The categories of this paper are: chem-ph
28
The categories of this paper are: alg-geom
27
The categories of this paper are: comp-gas
29
The categories of this paper are: funct-an
36
The categories of this paper are: cmp-lg
37
The categories of this paper are: supr-con
4
The categories of this paper are: cond-mat
22
The categories of this paper are: chao-dyn
13
The categories of this paper are: quant-ph
15
The categories of this paper are: nucl-ex
26
The categories of this paper are: bayes-an
23
The categories of this paper are: solv-int
25
The categories of this paper are: patt-sol
33
The categories of this paper are: plasm-ph