Membership inference attack with relative decision boundary distance