Privacy Attacks Repository
| Title | Authors | Year | Data Type (Inputs) | Type of Data Release (Outputs) | Attacker Objectives | Research Type | BibTeX | Code | Links | Submitter |
|---|---|---|---|---|---|---|---|---|---|---|
The 2010 Census Confidentiality Protections Failed, Here's How and Why |
2023 | Tabular | Linear-Queries | Reconstruction | Empirical | Download | Code | Paper | John Abowd, Cornell | |
One-shot Empirical Privacy Estimation for Federated Learning |
2024 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Yash Maurya, Independent Researcher | ||
A linear reconstruction approach for attribute inference attacks against synthetic data |
2024 | Tabular | Generative-Model | Attribute inference | Empirical | Download | Code | Paper | Georgi Ganev, UCL | |
"What do you want from theory alone?" Experimenting with Tight Auditing of Differentially Private Synthetic Data Generation |
2024 | Tabular | Generative-Model | Membership-Inference | Empirical | Download | Code | Paper | Yash Maurya, Independent Researcher | |
Reconstructing training data with informed adversaries |
2022 | Image | Predictive-Model | Reconstruction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Scalable Membership Inference Attacks via Quantile Regression |
2024 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Johan Östman, AI Sweden | ||
DP-Sniper: Black-Box Discovery of Differential
Privacy Violations using Classifier |
2021 | Tabular | NaN | Information Leakage | Empirical | Download | Paper | Georgi Ganev, UCL | ||
When the Curious Abandon Honesty: Federated Learning Is Not Private |
2023 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Dmitrii Usynin, TUM/Imperial College London | |
Membership inference attacks against synthetic data through overfitting detection |
2023 | Tabular | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Extracting training data from diffusion models |
2023 | Image | Generative-Model | Data-Extraction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Extracting training data from large language models. |
2021 | Text | Generative-Model | Data-Extraction | Applications | Download | Paper | Jon Ullman, Northeastern University | ||
Stealing Part of a Production Language Model |
2024 | Text | Generative-Model | Data-Extraction | Applications | Download | Paper | Daniil Filienko, University of Washington | ||
The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks |
2019 | Text | Generative-Model | Data-Extraction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Membership Inference Attacks From First Principles |
2022 | Tabular | Predictive-Model | Membership-Inference | Theoretical | Download | Paper | Yves-Alexandre de Montjoye, Imperial College | ||
The Privacy Onion Effect: Memorization is Relative |
2022 | Tabular | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Yves-Alexandre de Montjoye, Imperial College | ||
Gan-leaks: a taxonomy of membership inference attacks against generative models |
2020 | Image | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Label-only membership inference attacks |
2021 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Johan Östman, AI Sweden | ||
Privacy Threats in Stable Diffusion Models |
2023 | Image | Generative-Model | Membership-Inference | Applications | Download | Paper | Saraswathy RV, HP Inc. | ||
Linear program reconstruction in practice. |
2018 | Tabular | Linear-Queries | Reconstruction | Applications | Download | Paper | Jon Ullman, Northeastern University | ||
Empirical privacy and empirical utility of anonymized data. |
2013 | Tabular | Linear-Queries | Reconstruction | Empirical | Download | Paper | James Honaker, Anonym | ||
QuerySnout: Automating the Discovery of Attribute Inference Attacks against Query-Based Systems |
2022 | Tabular | Linear-Queries | Attribute-Inference | Empirical | Download | Paper | Ana-Maria Cretu, EPFL | ||
Privacy Side Channels in Machine Learning Systems |
2024 | Text | NaN | Information Leakage | Empirical | Download | Paper | Yash Maurya, Independent Researcher | ||
Confidence-ranked reconstruction of census microdata frompublished statistics |
2023 | Tabular | Linear-Queries | Membership-Inference | Empirical | Download | Paper | Audra McMillan, Apple | ||
SPEAR:Exact Gradient Inversion of Batches in Federated Learning
|
2024 | Image | Predictive-Model | Reconstruction | Theoretical | Download | Paper | Prahaladh Chandrahasan, Carnegie Mellon University | ||
Revealing Information While Preserving Privacy |
2003 | Tabular | Linear-Queries | Reconstruction | Theoretical | Download | Paper | Jon Ullman, Northeastern University | ||
Do Membership Inference Attacks Work on Large Language Models? |
2024 | Text | Generative-Model | Membership-Inference | Empirical | Download | Code | Paper | Daniil Filienko, University of Washington | |
Exposed! a survey of attacks on private data. |
2017 | Tabular | NaN | NaN | Theoretical | Download | Paper | James Honaker, Anonym | ||
New Efficient Attacks on Statistical Disclosure Control Mechanisms |
2008 | Tabular | Linear-Queries | Information Leakage | Theoretical | Download | Paper | Saraswathy RV, HP Inc. | ||
Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Models |
2022 | Text | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Dmitrii Usynin, TUM/Imperial College London | |
Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models |
2021 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Dmitrii Usynin, TUM/Imperial College London | |
On the Inadequacy of Similarity-based Privacy Metrics: Reconstruction Attacks against "Truly Anonymous Synthetic Data" |
2023 | Tabular | Generative-Model | Reconstruction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Understanding database reconstruction attacks on public data |
2019 | Tabular | Linear-Queries | Reconstruction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Inverting Gradients -- How easy is it to break privacy in federated learning? |
2020 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Aurélien Bellet, Inria | |
A Unified Framework for Quantifying Privacy Risk in Synthetic Data |
2023 | Tabular | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Synthetic is all you need: removing the auxiliary data assumption for membership inference attacks against synthetic data |
2023 | Tabular | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Reconstructing Training Data from Trained Neural Networks |
2022 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Georgi Ganev, UCL | |
LOGAN: Membership Inference Attacks Against Generative Models |
2019 | Image | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Monte Carlo and Reconstruction Membership Inference Attacks against Generative Models |
2019 | Image | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Tapas: Toolbox for Adversarial Privacy Auditing of
Synthetic Data |
2022 | Tabular | NaN | NaN | NaN | Download | Paper | Daniil Filienko, University of Washington | ||
Auditing Differentially Private Machine Learning:
How Private is Private SGD? |
Image | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Tudor Cebere, Inria | |||
Are We There Yet? Timing and Floating-Point Attacks on Differential Privacy Systems |
2022 | NaN | NaN | Reconstruction | Applications | Download | Paper | Zachary Ratliff, Harvard + OpenDP | ||
User Inference Attacks on Large Language Models |
2023 | NaN | Generative-Model | Membership-Inference | Empirical | Download | Paper | Peter Kairouz, Google | ||
Cocktail Party Attack: Breaking Aggregation-Based Privacy in Federated Learning Using Independent Component Analysis |
2023 | Image | Predictive-Model | Reconstruction | Theoretical | Download | Paper | Dmitrii Usynin, TUM/Imperial College London | ||
PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining
|
2024 | Image, Tabular, Text | Predictive-Model | Membership-Inference | Empirical | Download | Code | Paper | Yash Maurya, Independent Researcher | |
Membership inference attacks by exloiting loss trajectories |
2022 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Code | Paper | Johan Östman, AI Sweden | |
Group and Attack: Auditing Differential Privacy |
2023 | NaN | NaN | Information Leakage | Empirical | Download | Code | Paper | Georgi Ganev, UCL | |
Antipodes of Label Differential Privacy: PATE and ALIBI |
2021 | Image | Predictive-Model | Attribute inference | Empirical | Download | Code | Paper | Ilya Mironov, Meta | |
Membership Inference Attacks against Language Models via Neighbourhood Comparison |
2023 | Text | Generative-Model | Membership-Inference | Applications | Download | Code | Paper | Hamid Mozaffari, Oracle Labs | |
Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks
|
2022 | Text | Generative-Model | Membership-Inference | Applications | Download | Paper | Daniil Filienko, University of Washington | ||
Privacy Attacks in Decentralized Learning |
2024 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Aurélien Bellet, Inria | |
Adversary instantiation: lower bounds for differentially private machine learning |
2021 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Scalable extraction of training data from (production) language models |
2023 | Text | Generative-Model | Data-Extraction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Tight Auditing of Differentially Private Machine Learning |
2023 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
On utility and privacy in synthetic genomic data |
2022 | Tabular | Generative-Model | Membership-Inference | Empirical | Download | Paper | Georgi Ganev, UCL | ||
SoK: Security and Privacy in Machine Learning |
2018 | NaN | NaN | NaN | survey | Download | Paper | Ilya Mironov, Meta | ||
Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models |
2024 | Text | Generative-Model | Membership-Inference | Empirical | Download | Paper | |||
Knock Knock, Who's There? Membership Inference on Aggregate Location Data |
2017 | Tabular | Linear-Queries | Membership-Inference | Empirical | Download | Paper | Ana-Maria Cretu, EPFL Yves-Alexandre de Montjoye, Imperial College | ||
On the Difficulty of Membership Inference Attacks |
2021 | Image | Predictive-Model | Membership-Inference | Empirical | Download | Code | Paper | ||
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning |
2023 | NaN | NaN | NaN | Theoretical | Download | Paper | Ilya Mironov, Meta | ||
Updates-leak: Data set inference and reconstruction attacks in online learning |
2020 | Image | Predictive-Model | Reconstruction | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Detecting Pretraining Data from Large Language Models |
2023 | Text | Generative-Model | Membership-Inference | Applications | Download | Code | Paper | Hamid Mozaffari, Oracle Labs | |
Shokri, R., Stronati, M., Song, C. and Shmatikov |
2017 | NaN | NaN | Membership-Inference | Empirical | Download | Paper | James Honaker, Anonym | ||
Synthetic Data - Anonymisation Groundhog Day |
2022 | Tabular | Generative-Model | Membership-Inference | Empirical | Download | Paper | Yves-Alexandre de Montjoye, Imperial College | ||
Privacy Auditing with One (1) Training Run. |
2024 | NaN | NaN | Membership-Inference | Empirical | Download | Paper | James Honaker, Anonym | ||
QueryCheetah: Fast Automated Discovery of Attribute Inference Attacks Against Query-Based Systems |
2024 | Tabular | Linear-Queries | Attribute inference | Empirical | Download | Code | Paper | Bozhidar Stevanoski, Imperial College London | |
Do Parameters Reveal More than Loss for Membership Inference? |
2024 | Tabular | Predictive-Model | Membership-Inference | Theoretical | Download | Code | Paper | Anshuman Suri, UVA | |
Debugging Differential Privacy: A Case Study for Privacy Auditing |
2022 | Image | Predictive-Model | Information Leakage | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Demystifying Membership Inference Attacks in Machine Learning as a Service |
2021 | Image, tabular | Predictive-Model | Membership-Inference | Empirical | Download | Paper | Ilya Mironov, Meta | ||
Beyond Gradients: Exploiting Adversarial Priors in Model Inversion Attacks |
2023 | Image | Predictive-Model | Reconstruction | Empirical | Download | Paper | Dmitrii Usynin, TUM/Imperial College London | ||
Technical privacy metrics: a systematic survey. |
Tabular | Linear-Queries | Information Leakage | Theoretical | Paper | James Honaker, Anonym | ||||
Curator Attack: When Blackbox Differential Privacy Auditing Loses Its Power |
2024 | Tabular | Predictive-Model | Information Leakage | Empirical | Download | Code | Paper | Yash Maurya, Independent Researcher | |
On the Importance of Difficulty Calibration in Membership Inference Attacks |
2022 | Image, tabular | Predictive-Model | Membership-Inference | Empirical | Download | Code | Paper | Ilya Mironov, Meta | |
Fishing for User Data in Large-Batch Federated Learning via Gradient Magnification |
2022 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Dmitrii Usynin, TUM/Imperial College London | |
You only query once: an efficient label-only membership inference attack |
Image | Predictive-Model | Membership-Inference | Empirical | Download | Code | Paper | Johan Östman, AI Sweden | ||
DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics |
2025 | Tabular | Linear queries | Attribute inference attack | Empirical | Download | Paper | Bozhidar Stevanoski, Imperial College London | ||
Enhanced Membership Inference Attacks against Machine Learning Models |
2022 | Tabular | Predictive-Model | Membership-Inference | Empirical | Download | Paper | |||
Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting |
2018 | Text | Generative-Model | Membership-Inference | Empirical | Download | Paper | Daniil Filienko, University of Washington | ||
See Through Gradients: Image Batch Recovery via GradInversion |
2021 | Image | Predictive-Model | Reconstruction | Empirical | Download | Code | Paper | Dmitrii Usynin, TUM/Imperial College London | |
Bayesian Estimation of Differential Privacy |
2023 | Image | Predictive-Model | Information Leakage | Empirical | Download | Paper | Georgi Ganev, UCL | ||
Low-Cost High-Power Membership Inference Attacks |
2024 | Tabular | Predictive-Model | Membership-Inference | Empirical | Download | Code | Paper | Luca Melis, Meta | |
Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models |
2024 | Text | Generative-Model | Membership-Inference | Applications | Download | Code | Paper | Hamid Mozaffari, Oracle Labs |
<div class="side-panel">
<div class="side-panel-content" id="attack-details">
</div>
</div>