Which of the following is the BEST mitigation control for membership-inference attacks against AI systems?
Differential privacy limits the influence of an individual training record on a model, reducing the information an attacker can use to infer whether that record was part of the training data. NIST identifies differential privacy as a privacy-preserving technique for limiting information usable in membership-inference and related privacy attacks.
Community Discussion