Search papers, labs, and topics across Lattice.
This paper introduces ReproMIA, a novel membership inference attack framework that uses model reprogramming to amplify privacy leakage signals. By proactively inducing and magnifying latent privacy footprints within model representations, ReproMIA overcomes the limitations of traditional MIAs, particularly in low False Positive Rate regimes. Experiments across diverse architectures like LLMs and diffusion models demonstrate significant performance gains over existing state-of-the-art baselines, especially in low-FPR scenarios.
Model reprogramming can be weaponized to create membership inference attacks that are significantly more effective, especially when high precision is needed.
The pervasive deployment of deep learning models across critical domains has concurrently intensified privacy concerns due to their inherent propensity for data memorization. While Membership Inference Attacks (MIAs) serve as the gold standard for auditing these privacy vulnerabilities, conventional MIA paradigms are increasingly constrained by the prohibitive computational costs of shadow model training and a precipitous performance degradation under low False Positive Rate constraints. To overcome these challenges, we introduce a novel perspective by leveraging the principles of model reprogramming as an active signal amplifier for privacy leakage. Building upon this insight, we present \texttt{ReproMIA}, a unified and efficient proactive framework for membership inference. We rigorously substantiate, both theoretically and empirically, how our methodology proactively induces and magnifies latent privacy footprints embedded within the model's representations. We provide specialized instantiations of \texttt{ReproMIA} across diverse architectural paradigms, including LLMs, Diffusion Models, and Classification Models. Comprehensive experimental evaluations across more than ten benchmarks and a variety of model architectures demonstrate that \texttt{ReproMIA} consistently and substantially outperforms existing state-of-the-art baselines, achieving a transformative leap in performance specifically within low-FPR regimes, such as an average of 5.25\% AUC and 10.68\% TPR@1\%FPR increase over the runner-up for LLMs, as well as 3.70\% and 12.40\% respectively for Diffusion Models.
