Conventional membership inference attacks usually require a large number of queries the target model when training shadow models, and this task becomes extremely difficult is limited. Aiming at problem insufficient data for models due to limited queries, we propose attack method based on generative adversarial networks (GAN). First, use augment samples obtained by small expand model; Secondly, ...