Vassilis Vassiliades

Exploring Model Inversion Attacks in the Black-box Setting

2023 · Proceedings on Privacy Enhancing Technologies

Model Inversion (MI) attacks, that aim to recover semantically meaningful reconstructions for each target class, have been extensively studied and demonstrated to be successful in the white-box setting. On the other hand, black-box MI attacks …