Agent Tuning & Optimization 相关度: 6/10

MIDST Challenge at SaTML 2025: Membership Inference over Diffusion-models-based Synthetic Tabular data

Masoumeh Shafieinejad, Xi He, Mahshid Alinoori, John Jewell, Sana Ayromlou, Wei Pang, Veronica Chatrath, Garui Sharma, Deval Pandya
arXiv: 2603.19185v1 发布: 2026-03-19 更新: 2026-03-19

AI 摘要

MIDST挑战赛评估扩散模型生成合成表格数据在抵抗成员推断攻击方面的隐私性。

主要贡献

  • 量化评估扩散模型生成合成表格数据的隐私增益
  • 探索针对扩散模型生成表格数据的黑盒和白盒成员推断攻击方法
  • 针对单表和多关系表格数据,研究扩散模型的隐私保护能力

方法论

通过设计成员推断攻击,评估针对扩散模型生成的合成表格数据的隐私保护能力,并探索不同的目标模型。

原文摘要

Synthetic data is often perceived as a silver-bullet solution to data anonymization and privacy-preserving data publishing. Drawn from generative models like diffusion models, synthetic data is expected to preserve the statistical properties of the original dataset while remaining resilient to privacy attacks. Recent developments of diffusion models have been effective on a wide range of data types, but their privacy resilience, particularly for tabular formats, remains largely unexplored. MIDST challenge sought a quantitative evaluation of the privacy gain of synthetic tabular data generated by diffusion models, with a specific focus on its resistance to membership inference attacks (MIAs). Given the heterogeneity and complexity of tabular data, multiple target models were explored for MIAs, including diffusion models for single tables of mixed data types and multi-relational tables with interconnected constraints. MIDST inspired the development of novel black-box and white-box MIAs tailored to these target diffusion models as a key outcome, enabling a comprehensive evaluation of their privacy efficacy. The MIDST GitHub repository is available at https://github.com/VectorInstitute/MIDST

标签

合成数据 扩散模型 成员推断攻击 隐私保护 表格数据

arXiv 分类

cs.LG