2025 AISTATS AISTATS 2025

Some Targets Are Harder to Identify than Others: Quantifying the Target-dependent Membership Leakage