attackVersion

The version of the membership inference attack, which consists of the attack type and its version number, used to generate this privacy score.