Membership Inference Attacks Against Machine Learning Models
Date: 2016-10
Affected: Google Prediction API, Amazon ML, generic classifiers
Attack vector: membership-inference
Category: research
Severity: High

Shokri, Stronati, Song, and Shmatikov demonstrate that given black-box access to an ML model, an attacker can decide if a record was in its training set using shadow models. Evaluated against Google and Amazon ML-as-a-service. IEEE S&P 2017.


Mitigations:

Architectural layers (MAESTRO):