TAMIS: Tailored Membership Inference Attacks on Synthetic Data

Membership Inference Attacks (MIA) enable to empirically assess the privacy of a machine learning algorithm. In this paper, we propose TAMIS, a novel MIA against differentially-private synthetic data generation methods that rely on graphical models. This attack builds upon MAMA-MIA, a recently-published state-of-the-art method. It lowers its computational cost and requires less attacker knowledge. Our attack is the product of a two-fold improvement. First, we recover the graphical model having generated a synthetic dataset by using solely that dataset, rather than shadow-modeling over an auxiliary one. This proves less costly and more performant. Second, we introduce a more mathematically-grounded attack score, that provides a natural threshold for binary predictions. In our experiments, TAMIS achieves better or similar performance as MAMA-MIA on replicas of the SNAKE challenge.

@article{andrey2025_2504.00758,
  title={ TAMIS: Tailored Membership Inference Attacks on Synthetic Data },
  author={ Paul Andrey and Batiste Le Bars and Marc Tommasi },
  journal={arXiv preprint arXiv:2504.00758},
  year={ 2025 }
}