Threat intelligence / Technique

Infer Training Data Membership

Adversaries may infer the membership of a data sample or global characteristics of the data in its training set, which raises privacy concerns. Some strategies make use of a shadow model that could be obtained via [Train Proxy via Replication](/techniques/AML.T0005.001), others use statistics of model prediction scores. This can cause the victim model to leak private information, such as PII of those in the training set or other forms of protected IP.

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

Adversaries may infer the membership of a data sample or global characteristics of the data in its training set, which raises privacy concerns. Some strategies make use of a shadow model that could be obtained via [Train Proxy via Replication](/techniques/AML.T0005.001), others use statistics of model prediction scores. This can cause the victim model to leak private information, such as PII of those in the training set or other forms of protected IP.

5 recorded

Relationships

mitigates

from AI Red Team

Mitigation

mitigates

from AI Telemetry Logging

Mitigation

mitigates

from Limit AI Service Query Volume and Rate

Mitigation

mitigates

from Predictive AI Output Obfuscation

Mitigation

subtechnique-of

to Exfiltration via AI Inference API

Technique

1 external

References

mitre-atlas

AML.T0024.000