arXiv:2411.03363cs.CRcs.LG2024-11ICLR被引 1

首个系统性评测训练数据检测方法的基准,覆盖三类数据与21种算法。

TDDBench: A Benchmark for Training data detection

  • 构建跨模态基准TDDBench,含13个数据集与4类检测范式。
  • 21种方法在多维度评估中表现普遍不理想,最高准确率不足80%。
  • 开源工具包助力研究与应用,支持效果与效率权衡决策。

训练数据检测(TDD)旨在判断特定数据实例是否被用于训练机器学习模型,在计算机安全领域亦称成员推断攻击(MIA)。由于其在评估训练数据泄露风险、版权认证及模型遗忘验证中的潜力,近年来受到广泛关注,催生了众多方法。然而,当前缺乏全面的基准来系统评估这些方法的有效性。本文提出TDDBench,包含13个涵盖图像、表格和文本三类模态的数据集,对21种不同TDD方法在四种检测范式下进行评估,从平均检测性能、最佳性能、内存消耗以及时间和内存计算效率五个维度展开分析。实验揭示各类方法在不同数据集上普遍表现不佳。为提升可复现性与可访问性,我们已将TDDBench开源至https://github.com/zzh9568/TDDBench,助力研究人员定位算法瓶颈,帮助从业者根据具体场景选择性能与效率平衡的方案。

原文摘要 · Abstract (English)

Training Data Detection (TDD) is a task aimed at determining whether a specific data instance is used to train a machine learning model. In the computer security literature, TDD is also referred to as Membership Inference Attack (MIA). Given its potential to assess the risks of training data breaches, ensure copyright authentication, and verify model unlearning, TDD has garnered significant attention in recent years, leading to the development of numerous methods. Despite these advancements, there is no comprehensive benchmark to thoroughly evaluate the effectiveness of TDD methods. In this work, we introduce TDDBench, which consists of 13 datasets spanning three data modalities: image, tabular, and text. We benchmark 21 different TDD methods across four detection paradigms and evaluate their performance from five perspectives: average detection performance, best detection performance, memory consumption, and computational efficiency in both time and memory. With TDDBench, researchers can identify bottlenecks and areas for improvement in TDD algorithms, while practitioners can make informed trade-offs between effectiveness and efficiency when selecting TDD algorithms for specific use cases. Our extensive experiments also reveal the generally unsatisfactory performance of TDD algorithms across different datasets. To enhance accessibility and reproducibility, we open-source TDDBench for the research community at https://github.com/zzh9568/TDDBench.

数据安全成员推断基准测试机器学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。