arXiv Machine Learning
Spectrum-Aware Bounds on Invertibility for Privacy-Enhancing Instance Encoding
Read the original on arXiv Machine Learning →The Flow has not summarised this story yet — read it at arXiv Machine Learning.
Related stories
arXiv AI
Jun 26
Hybrid privacy-aware semantic search: SVD-truncated document geometry and CKKS-encrypted query reranking under a restricted threat model
arXiv:2606. 26373v1 Announce Type: cross Abstract: Dense embeddings power semantic search and retrieval-augmented generation, but embedding-inversion attacks can reconstruct source text from a vector: when a vector database leaks, the documents behind it leak too.
arXiv Machine Learning
Jun 2
Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?
arXiv:2409. 01062v4 Announce Type: replace Abstract: Model Inversion (MI) attacks pose a significant privacy threat by reconstructing private training data from machine learning models.
arXiv Machine Learning
Jun 5
Detectability in Diversity: Improved Canary Crafting for Privacy Auditing in One Run
arXiv:2605. 27292v2 Announce Type: replace Abstract: Privacy auditing aims to empirically assess privacy leakage in machine learning models using membership inference attacks (MIAs), and to derive lower bounds on differential privacy (DP) parameters.
arXiv Machine Learning
Jul 31
Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy
arXiv:2607. 27815v1 Announce Type: cross Abstract: Local differential privacy (LDP) protocols are vulnerable to poisoning attacks.
arXiv Machine Learning
Aug 4
Defending Membership Inference Attacks via Privacy-aware Sparsity Tuning
arXiv:2410. 06814v2 Announce Type: replace Abstract: Over-parameterized models are typically vulnerable to membership inference attacks, which aim to determine whether a specific sample is included in the training of a given model.
arXiv Machine Learning
Aug 18
A Privacy Study of Sparse Collaborative Inference
arXiv:2608. 16236v1 Announce Type: new Abstract: Collaborative inference (CI) splits a model between an edge device and a server, whereby the client computes an intermediate activation, transmits it, and the server completes the computation.