fhoussiau
commented
2 years ago A few ideas of black-box attacks:
- Stadler et al. (which we already have)
- Nearest-neighbour attacks (which includes direct lookup)
- Similarity-based attacks for time series (see [1])
[1] Ziqi Zhang, Chao Yan, and Bradley A Malin. Membership inference attacks against synthetic health data. Journal of biomedical informatics, 125:103977, 2022.
In comments, we can describe the initial kind of attacks we want to include in the tool.