To study the effect of hyperparameter selection to train shadow models on the performance of score-based membership inference attacks (MIAs).
Switch to the src
directory in this repo and download the BiT pre-trained model for ResNet50:
wget https://storage.googleapis.com/bit_models/BiT-M-R50x1.npz