1 code implementation • 26 Feb 2024 • Jeffrey G. Wang, Jason Wang, Marvin Li, Seth Neel
In fine-tuning, we find that given access to the loss of the fine-tuned and base models, a fine-tuned loss ratio attack FLoRA is able to achieve near perfect MIA peformance.