[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"glossary-membership-inference-attack::en":3,"gloss-cluster-membership-inference-attack::en":23,"gloss-next-membership-inference-attack::en":9},{"slug":4,"category":5,"name":6,"definition":7,"meta_desc":8,"faq":9,"schema_markup":9,"related":10},"membership-inference-attack","security","Membership Inference Attack","A membership inference attack asks a model a question it was never supposed to answer: was this specific record part of your training data? The attacker probes the model — often just via confidence scores or loss on a candidate example — and exploits the fact that models behave measurably differently on data they memorized than on data they have never seen. Overfitted models are the most vulnerable, so the attack doubles as a practical privacy audit. The stakes are concrete: confirming that a person's record was in a hospital's training set discloses that they were a patient, and regulators increasingly treat such leakage as a personal-data breach. Defenses include differential privacy during training (the principled fix), regularization and deduplication to curb memorization, and limiting the precision of confidence outputs exposed through your API. Any SaaS product that fine-tunes on customer data should test for this before shipping.","A membership inference attack detects whether a specific record was in a model's training data — turning memorization into a privacy breach.",null,[11,14,17,20],{"slug":12,"name":13},"differential-privacy","Differential Privacy",{"slug":15,"name":16},"model-exfiltration","Model Exfiltration (Model Extraction)",{"slug":18,"name":19},"overfitting","Overfitting",{"slug":21,"name":22},"pii","Personally Identifiable Information (PII)",[24,28,32,36,39,42,45,48,51,54,57,60],{"slug":25,"category":5,"name":26,"updated_at":27},"audit-log","Audit Log (Audit Trail)","2026-08-24T02:46:37+00:00",{"slug":29,"category":5,"name":30,"updated_at":31},"blast-radius","Blast Radius","2026-08-24T03:30:02+00:00",{"slug":33,"category":5,"name":34,"updated_at":35},"break-glass-access","Break-Glass Access","2026-08-24T02:46:38+00:00",{"slug":37,"category":5,"name":38,"updated_at":35},"bridge-letter","Bridge Letter",{"slug":40,"category":5,"name":41,"updated_at":35},"business-associate-agreement","Business Associate Agreement (BAA)",{"slug":43,"category":5,"name":44,"updated_at":27},"byok","Bring Your Own Key (BYOK)",{"slug":46,"category":5,"name":47,"updated_at":35},"cve","CVE (Common Vulnerabilities and Exposures)",{"slug":49,"category":5,"name":50,"updated_at":31},"data-classification","Data Classification",{"slug":52,"category":5,"name":53,"updated_at":35},"data-loss-prevention","Data Loss Prevention (DLP)",{"slug":55,"category":5,"name":56,"updated_at":35},"data-minimization","Data Minimization",{"slug":58,"category":5,"name":59,"updated_at":35},"data-poisoning","Data Poisoning",{"slug":61,"category":5,"name":62,"updated_at":35},"data-processing-agreement","Data Processing Agreement (DPA)"]