arXiv Computer Vision September 21, 2026 By Hao Fang, Yixiang Qiu, Hongyao Yu, Wenbo Yu, Jiawei Kong, Baoli Chong, Bin Chen, Xuan Wang, Shu-Tao Xia, Ke Xu

Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses

Read the original on arXiv Computer Vision →

The paper "Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses" provides a comprehensive review of model inversion (MI) attacks that exploit trained deep neural networks to reconstruct private training data. It traces the evolution of MI from early machine‑learning contexts to recent DNN‑based attacks across various modalities and learning tasks, offering a detailed taxonomy and comparative analysis of both attacks and defenses. The authors also present an open‑source toolbox on GitHub to support further research in this area.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Computer Vision.

safety

arXiv Machine Learning

Aug 18

Model Inversion Attacks: A Survey of Approaches and Countermeasures

arXiv:2411. 10023v3 Announce Type: replace Abstract: Deep neural networks have enabled numerous studies and applications on both Euclidean data, such as images and text, and non-Euclidean data, such as graphs.

By Zhanke Zhou, Jianing Zhu, Fengfei Yu, Xuan Li, Xiong Peng, Tongliang Liu, Bo Han

safety

arXiv Machine Learning

Oct 7

Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff

arXiv:2610.07677v1 Announce Type: new Abstract: In this paper, we show that standard evaluations of high-resolution Model Inversion Attacks (MIAs) significantly underestimate training-data privacy le...

By Shailen Smith, Rasmus Torp, Adam Breuer

benchmarks safety

Hugging Face Trending Papers

Oct 6

Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff

In this paper, we show that standard evaluations of high-resolution Model Inversion Attacks (MIAs) significantly underestimate training-data privacy leakage. State-of-the-art privacy defenses, standar...

benchmarks safety

arXiv Machine Learning

Jun 2

Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?

arXiv:2409. 01062v4 Announce Type: replace Abstract: Model Inversion (MI) attacks pose a significant privacy threat by reconstructing private training data from machine learning models.

By Viet-Hung Tran, Ngoc-Bao Nguyen, Son T. Mai, Hans Vandierendonck, Ira Assent, Alex Kot, Ngai-Man Cheung

benchmarks safety

arXiv Machine Learning

Aug 6

One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP

arXiv:2505. 19840v3 Announce Type: replace-cross Abstract: Deep Neural Networks (DNNs) have achieved widespread success yet remain prone to adversarial attacks.

By Binyan Xu, Xilin Dai, Di Tang, Kehuan Zhang

llms multimodal safety

arXiv Machine Learning

Aug 27

Provable Privacy Attacks on Trained Shallow Neural Networks

The paper investigates provable privacy attacks on trained 2‑layer ReLU neural networks, specifically membership inference and data reconstruction. It demonstrates that the implicit bias of such networks can be leveraged to identify, with high probability, whether a given point was part of the training set in high‑dimensional, nearly orthogonal settings, and to construct a finite set containing a constant fraction of training points in a univariate setting. This work claims to be the first to reveal provable vulnerabilities arising from implicit bias in shallow neural networks.

By Guy Smorodinsky, Gal Vardi, Itay Safran

safety

One email a morning, machine-written

Related stories

Model Inversion Attacks: A Survey of Approaches and Countermeasures

Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff

Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff

Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?

One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP

Provable Privacy Attacks on Trained Shallow Neural Networks