{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/gan-leaks-a-taxonomy-of-membership-inference","title":"GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models","arxiv_id":"1909.03935","date":"2019-09-09","proceeding":null,"authors":["Dingfan Chen","Ning Yu","Yang Zhang","Mario Fritz"],"abstract":"Deep learning has achieved overwhelming success, spanning from discriminative models to generative models. In particular, deep generative models have facilitated a new level of performance in a myriad of areas, ranging from media manipulation to sanitized dataset generation. Despite the great success, the potential risks of privacy breach caused by generative models have not been analyzed systematically. In this paper, we focus on membership inference attack against deep generative models that reveals information about the training data used for victim models. Specifically, we present the first taxonomy of membership inference attacks, encompassing not only existing attacks but also our novel ones. In addition, we propose the first generic attack model that can be instantiated in a large range of settings and is applicable to various kinds of deep generative models. Moreover, we provide a theoretically grounded attack calibration technique, which consistently boosts the attack performance in all cases, across different attack settings, data modalities, and training configurations. We complement the systematic analysis of attack performance by a comprehensive experimental study, that investigates the effectiveness of various attacks w.r.t. model type and training configurations, over three diverse application scenarios (i.e., images, medical data, and location data).","url_abs":"https://arxiv.org/abs/1909.03935v3","url_pdf":"https://arxiv.org/pdf/1909.03935v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"gan-leaks-a-taxonomy-of-membership-inference","repo_url":"https://github.com/DingfanChen/GAN-Leaks","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"tf","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"dataset-generation","task_name":"Dataset Generation"},{"task_slug":"inference-attack","task_name":"Inference Attack"},{"task_slug":"membership-inference-attack","task_name":"Membership Inference Attack"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":null,"atlas_url":"https://app.syntology.ai/?focus=1909.03935","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1909.03935"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/DingfanChen/GAN-Leaks","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran_fixture":2,"ran_honours":3,"ran_draft_wrong":1,"unverified":16},"by_repo_kind":{"official":{"samples":22,"ran":6,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"90a97f8af1b8f269","entry":"adjust_dynamic_range","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/misc.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/misc.py","link_basis":"plan_row","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"90a97f8af1b8f269"}},{"code_sha256_prefix":"40125e1efb67fa92","entry":"conv_out_size_same","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/model.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/model.py","link_basis":"plan_row","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"40125e1efb67fa92"}},{"code_sha256_prefix":"f7d82b02ff7c7fe1","entry":"cset","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/networks.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/networks.py","link_basis":"plan_row","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"f7d82b02ff7c7fe1"}},{"code_sha256_prefix":"040714a23128cf94","entry":"gen_random","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/model.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/model.py","link_basis":"plan_row","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"040714a23128cf94"}},{"code_sha256_prefix":"0c45399f3741921e","entry":"lerp","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/networks.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/networks.py","link_basis":"plan_row","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"0c45399f3741921e"}},{"code_sha256_prefix":"6e81789f8f2068c8","entry":"lerp_clip","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/networks.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/networks.py","link_basis":"plan_row","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6e81789f8f2068c8"}},{"code_sha256_prefix":"82992ce1f4764e7b","entry":"G_wgan_acgan","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/loss.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/loss.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"82992ce1f4764e7b"}},{"code_sha256_prefix":"5d3ea24b351a5a12","entry":"conv2d","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/ops.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/ops.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"5d3ea24b351a5a12"}},{"code_sha256_prefix":"2906e84dbebc3e14","entry":"conv_cond_concat","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/ops.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/ops.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2906e84dbebc3e14"}},{"code_sha256_prefix":"c99617d8e7395b0f","entry":"create_celebahq","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/dataset_tool.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/dataset_tool.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c99617d8e7395b0f"}},{"code_sha256_prefix":"cf03a3ce8cc3695e","entry":"create_image_grid","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/misc.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/misc.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"cf03a3ce8cc3695e"}},{"code_sha256_prefix":"f1f0201f439514d5","entry":"deconv2d","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/ops.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/ops.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"f1f0201f439514d5"}},{"code_sha256_prefix":"81f0ed5010201398","entry":"execute_cmdline","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/dataset_tool.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/dataset_tool.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"81f0ed5010201398"}},{"code_sha256_prefix":"c2e6e9b41af6cd71","entry":"expand_path","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/utils.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c2e6e9b41af6cd71"}},{"code_sha256_prefix":"4e4ae70c11635981","entry":"flatten","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/tfutil.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/tfutil.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"4e4ae70c11635981"}},{"code_sha256_prefix":"2cd5be47220a5bc0","entry":"ignore_unknown_theano_network","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/legacy.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/legacy.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2cd5be47220a5bc0"}},{"code_sha256_prefix":"574151db7f4e287b","entry":"is_tf_expression","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/tfutil.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/tfutil.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"574151db7f4e287b"}},{"code_sha256_prefix":"9a489c1c146c4e18","entry":"parse_tfrecord_np","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/dataset.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/dataset.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9a489c1c146c4e18"}},{"code_sha256_prefix":"490bcc28d486e9f7","entry":"parse_tfrecord_tf","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/dataset.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/dataset.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"490bcc28d486e9f7"}},{"code_sha256_prefix":"2c432d530ff1bcb3","entry":"read_image","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/utils.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2c432d530ff1bcb3"}},{"code_sha256_prefix":"e963375233fe6dbe","entry":"shape_to_list","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/pggan/tfutil.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/pggan/tfutil.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"e963375233fe6dbe"}},{"code_sha256_prefix":"221666d33a769cc9","entry":"timestamp","repo":"DingfanChen/GAN-Leaks","repo_kind":"official","path":"gan_models/dcgan/utils.py","file_url":"https://github.com/DingfanChen/GAN-Leaks/blob/HEAD/gan_models/dcgan/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"221666d33a769cc9"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}