TY - GEN
T1 - Multi-Feature Membership Analysis for Tabular Regression Models
T2 - 28th European Conference on Artificial Intelligence, ECAI 2025, including 14th Conference on Prestigious Applications of Intelligent Systems, PAIS 2025
AU - Cahana, Yitschak
AU - Hersko, Ido
AU - Wegerhoff, Noa
AU - Elovici, Yuval
AU - Shabtai, Asaf
N1 - Publisher Copyright:
© 2025 The Authors.
PY - 2025/10/21
Y1 - 2025/10/21
N2 - The intersection of machine learning (ML) and data privacy has become increasingly critical in safeguarding sensitive information. While membership inference attacks (MIAs) are often viewed as privacy threats, this work utilizes them as a tool for enforcing data sovereignty by detecting unauthorized data usage in ML models. While MIAs are well-studied for classification tasks, their application to regression models, particularly those handling tabular data, remains underexplored. This domain poses unique challenges due to its continuous outputs, high dimensionality, and diverse feature distributions. We present Multi-Feature Membership Analysis (MFMA), a framework that enhances membership inference in regression models through multiple complementary attack features. Our framework includes augmentation statistics, ensemble variation analysis, and targeted perturbation techniques, each capturing different behavioral signals of the model under black-box or semi-black-box access. Our comprehensive evaluation spans multiple datasets, model types, and attack scenarios. MFMA consistently outperforms baseline error-based attacks, with particularly notable improvements in the TPR at low FPR regime - a critical metric for real-world auditing and data ownership claims. These results demonstrate the feasibility and practical relevance of MIAs in tabular regression, and position MFMA as a step toward reliable data-use auditing in deployed ML systems, enabling organizations to enforce data sovereignty and enhance data privacy protection.
AB - The intersection of machine learning (ML) and data privacy has become increasingly critical in safeguarding sensitive information. While membership inference attacks (MIAs) are often viewed as privacy threats, this work utilizes them as a tool for enforcing data sovereignty by detecting unauthorized data usage in ML models. While MIAs are well-studied for classification tasks, their application to regression models, particularly those handling tabular data, remains underexplored. This domain poses unique challenges due to its continuous outputs, high dimensionality, and diverse feature distributions. We present Multi-Feature Membership Analysis (MFMA), a framework that enhances membership inference in regression models through multiple complementary attack features. Our framework includes augmentation statistics, ensemble variation analysis, and targeted perturbation techniques, each capturing different behavioral signals of the model under black-box or semi-black-box access. Our comprehensive evaluation spans multiple datasets, model types, and attack scenarios. MFMA consistently outperforms baseline error-based attacks, with particularly notable improvements in the TPR at low FPR regime - a critical metric for real-world auditing and data ownership claims. These results demonstrate the feasibility and practical relevance of MIAs in tabular regression, and position MFMA as a step toward reliable data-use auditing in deployed ML systems, enabling organizations to enforce data sovereignty and enhance data privacy protection.
UR - https://www.scopus.com/pages/publications/105024418662
U2 - 10.3233/FAIA251167
DO - 10.3233/FAIA251167
M3 - Conference contribution
AN - SCOPUS:105024418662
T3 - Frontiers in Artificial Intelligence and Applications
SP - 3049
EP - 3057
BT - ECAI 2025 - 28th European Conference on Artificial Intelligence, including 14th Conference on Prestigious Applications of Intelligent Systems, PAIS 2025 - Proceedings
A2 - Lynce, Ines
A2 - Murano, Nello
A2 - Vallati, Mauro
A2 - Villata, Serena
A2 - Chesani, Federico
A2 - Milano, Michela
A2 - Omicini, Andrea
A2 - Dastani, Mehdi
PB - IOS Press BV
Y2 - 25 October 2025 through 30 October 2025
ER -