MEMBERSHIP INFERENCE ATTACKS AND DEFENSES IN CLASSIFICATION MODELS