AdaMixup: A Dynamic Defense Framework for Membership Inference Attack Mitigation
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866913635084795904 |
|---|---|
| author | Chen, Ying Chen, Jiajing Weng, Yijie Chang, ChiaHua Yu, Dezhi Lin, Guanbiao |
| author_facet | Chen, Ying Chen, Jiajing Weng, Yijie Chang, ChiaHua Yu, Dezhi Lin, Guanbiao |
| contents | Membership inference attacks have emerged as a significant privacy concern in the training of deep learning models, where attackers can infer whether a data point was part of the training set based on the model's outputs. To address this challenge, we propose a novel defense mechanism, AdaMixup. AdaMixup employs adaptive mixup techniques to enhance the model's robustness against membership inference attacks by dynamically adjusting the mixup strategy during training. This method not only improves the model's privacy protection but also maintains high performance. Experimental results across multiple datasets demonstrate that AdaMixup significantly reduces the risk of membership inference attacks while achieving a favorable trade-off between defensive efficiency and model accuracy. This research provides an effective solution for data privacy protection and lays the groundwork for future advancements in mixup training methods. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2501_02182 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | AdaMixup: A Dynamic Defense Framework for Membership Inference Attack Mitigation Chen, Ying Chen, Jiajing Weng, Yijie Chang, ChiaHua Yu, Dezhi Lin, Guanbiao Machine Learning Artificial Intelligence Membership inference attacks have emerged as a significant privacy concern in the training of deep learning models, where attackers can infer whether a data point was part of the training set based on the model's outputs. To address this challenge, we propose a novel defense mechanism, AdaMixup. AdaMixup employs adaptive mixup techniques to enhance the model's robustness against membership inference attacks by dynamically adjusting the mixup strategy during training. This method not only improves the model's privacy protection but also maintains high performance. Experimental results across multiple datasets demonstrate that AdaMixup significantly reduces the risk of membership inference attacks while achieving a favorable trade-off between defensive efficiency and model accuracy. This research provides an effective solution for data privacy protection and lays the groundwork for future advancements in mixup training methods. |
| title | AdaMixup: A Dynamic Defense Framework for Membership Inference Attack Mitigation |
| topic | Machine Learning Artificial Intelligence |
| url | https://arxiv.org/abs/2501.02182 |