REVIEW 7 cited by
Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses
read the original abstract
Deep Neural Networks (DNNs) have revolutionized various domains with their exceptional performance across numerous applications. However, Model Inversion (MI) attacks, which disclose private information about the training dataset by abusing access to the trained models, have emerged as a formidable privacy threat. Given a trained network, these attacks enable adversaries to reconstruct high-fidelity data that closely aligns with the private training samples, posing significant privacy concerns. Despite the rapid advances in the field, we lack a comprehensive and systematic overview of existing MI attacks and defenses. To fill this gap, this paper thoroughly investigates this realm and presents a holistic survey. Firstly, our work briefly reviews early MI studies on traditional machine learning scenarios. We then elaborately analyze and compare numerous recent attacks and defenses on Deep Neural Networks (DNNs) across multiple modalities and learning tasks. By meticulously analyzing their distinctive features, we summarize and classify these methods into different categories and provide a novel taxonomy. Finally, this paper discusses promising research directions and presents potential solutions to open issues. To facilitate further study on MI attacks and defenses, we have implemented an open-source model inversion toolbox on GitHub (https://github.com/ffhibnese/Model-Inversion-Attack-ToolBox).
Forward citations
Cited by 7 Pith papers
-
Before the Mic: Physical-Layer Voiceprint Anonymization with Acoustic Metamaterials
EchoMask employs reconfigurable acoustic metamaterials to generate physical-layer frequency-selective interference that raises voiceprint miss-match rates above 90% across tested microphones while preserving speech in...
-
Safety, Security, and Cognitive Risks in World Models
World models enable efficient AI planning but create risks from adversarial corruption, goal misgeneralization, and human bias, demonstrated via attacks that amplify errors and reduce rewards on models like RSSM and D...
-
Hey, That's My Data! Token-Only Dataset Inference in Large Language Models
CatShift detects training data membership in LLMs by comparing output shifts induced by fine-tuning on member versus non-member data, relying on catastrophic forgetting without requiring logit access.
-
Leaking Circuit Secrets: Gradient Leakage Attacks on Graph Neural Networks
Gradient leakage attacks on GNNs for netlist benchmarks can expose gate types and Trojan properties; attention-based models leak more while defenses like differential privacy help only in limited cases without full pe...
-
Bypassing Copyright Protection in Diffusion-based Customization via Two-Stage Latent Feature Optimization
TS-LFO is a two-stage latent feature optimization method that bypasses state-of-the-art copyright defenses in diffusion-based image customization by restoring semantic consistency in latent space.
-
Revisiting the Privacy Risks of Split Inference: A GAN-Based Data Reconstruction Attack via Progressive Feature Optimization
PFO improves GAN-based split-inference reconstruction via progressive intermediate-feature optimization, but its quantitative claims rest on internally inconsistent metric tables.
-
Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses
A systematic review that organizes graph-ML IP protection into model-level and data-level attacks and defenses, and ships a benchmark library, PyGIP.
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.