The membership inference attack may have some errors with image data set.
The membership inference attack may have some errors with image data set.