arXiv Machine Learning
Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff
Read the original on arXiv Machine Learning →The Flow has not summarised this story yet — read it at arXiv Machine Learning.
Related stories
Hugging Face Trending Papers
4d ago
Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff
In this paper, we show that standard evaluations of high-resolution Model Inversion Attacks (MIAs) significantly underestimate training-data privacy leakage. State-of-the-art privacy defenses, standar...
arXiv Machine Learning
Jul 15
Reducing information dependency does not cause training data privacy. Adversarially non-robust features do
arXiv:2607. 12354v1 Announce Type: new Abstract: In this paper, we challenge the prevailing view that information dependency (including rote memorization) drives training data exposure to image reconstruction attacks.
arXiv Computer Vision
Sep 21
Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses
The paper "Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses" provides a comprehensive review of model inversion (MI) attacks that exploit trained deep neural networks to reconstruct private training data. It traces the evolution of MI from early machine‑learning contexts to recent DNN‑based attacks across various modalities and learning tasks, offering a detailed taxonomy and comparative analysis of both attacks and defenses. The authors also present an open‑source toolbox on GitHub to support further research in this area.
arXiv Machine Learning
Jun 2
Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?
arXiv:2409. 01062v4 Announce Type: replace Abstract: Model Inversion (MI) attacks pose a significant privacy threat by reconstructing private training data from machine learning models.
arXiv Machine Learning
Aug 18
Model Inversion Attacks: A Survey of Approaches and Countermeasures
arXiv:2411. 10023v3 Announce Type: replace Abstract: Deep neural networks have enabled numerous studies and applications on both Euclidean data, such as images and text, and non-Euclidean data, such as graphs.
arXiv AI
Sep 30
A Sharp Transition in Data Reconstruction under Differential Privacy
arXiv:2609.37344v1 Announce Type: cross Abstract: Data reconstruction attacks have empirically been successful in recovering training samples from learned models, raising privacy concerns and motivat...