Table 6. Performance of BlindMI attack... | Emerald Publishing

Table 6.

Performance of BlindMI attack in various defenses

Evaluation indicators	No. defended	MemGuard	Non-member mask	Member mask
Training accuracy	1.0000	1.0000	1.0000	1.0000
Test accuracy	0.5680	0.5610	0.5680	0.5590
BlindMI accuracy	0.7485	0.5930	0.5000	0.5010
BlindMI precision	0.7934	0.7236	0.5000	0.5005
BlindMI recall rate	0.6720	0.3010	0.9990	1.0000
BlindMI F1-score	0.7277	0.4251	0.6664	0.6671

Evaluation indicators	No. defended	MemGuard	Non-member mask	Member mask
Training accuracy	1.0000	1.0000	1.0000	1.0000
Test accuracy	0.5680	0.5610	0.5680	0.5590
BlindMI accuracy	0.7485	0.5930	0.5000	0.5010
BlindMI precision	0.7934	0.7236	0.5000	0.5005
BlindMI recall rate	0.6720	0.3010	0.9990	1.0000
BlindMI F1-score	0.7277	0.4251	0.6664	0.6671

Source: Authors’ own data, using the Ml-leaks described by Salem et al. and BlindMI described by Hui et al.