Attack model for already trained model

csong27 / membership-inference

Code for Membership Inference Attack against Machine Learning Models (in Oakland 2017)

176 stars 63 forks source link

Attack model for already trained model #4

Closed mhsamavatian closed 5 years ago

mhsamavatian commented 5 years ago

Hi, I am not an AI expert and I need to train your attack model. I am a little bit confused here. Why do you train a target model? Isn't the target model the one provided by MLAAS or at least the attacker does not know about. In other words, I have a trained model with inputs and outputs. I just need to train the shadow model and the attack model. Do I still need to train the target model again? If not what do I have to change in the code? Thanks

csong27 commented 5 years ago

Hi, we train the target model locally to "simulate" MLAAS. You can modify the code to replace with your trained target model.