Cover Image

Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Struppek, Lukas, Hintersdorf, Dominik, Kersting, Kristian
Format:	Preprint
Published:	2023
Subjects:	Machine Learning Cryptography and Security Computer Vision and Pattern Recognition
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Defending Our Privacy With Backdoors
by: Hintersdorf, Dominik, et al.
Published: (2023)

Learning to Break Deep Perceptual Hashing: The Use Case NeuralHash
by: Struppek, Lukas, et al.
Published: (2021)

Does CLIP Know My Face?
by: Hintersdorf, Dominik, et al.
Published: (2022)

UnlearnShield: Shielding Forgotten Privacy against Unlearning Inversion
by: Xue, Lulu, et al.
Published: (2026)

Can You Trust What You See? Alpha Channel No-Box Attacks on Video Object Detection
by: Yi, Ariana, et al.
Published: (2025)

Who Can See Through You? Adversarial Shielding Against VLM-Based Attribute Inference Attacks
by: Fan, Yucheng, et al.
Published: (2025)

Finding DoRI: Discovery of Retained Images in Diffusion Models
by: Kowalczuk, Antoni, et al.
Published: (2025)

Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing
by: Feng, Ryan, et al.
Published: (2022)

Towards Eliminating Hard Label Constraints in Gradient Inversion Attacks
by: Wang, Yanbo, et al.
Published: (2024)

LSP Framework: A Compensatory Model for Defeating Trigger Reverse Engineering via Label Smoothing Poisoning
by: Li, Beichen, et al.
Published: (2024)

PromptSmooth: Certifying Robustness of Medical Vision-Language Models via Prompt Learning
by: Hussein, Noor, et al.
Published: (2024)

MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense
by: Qiu, Yixiang, et al.
Published: (2024)

Adaptive Hybrid Masking Strategy for Privacy-Preserving Face Recognition Against Model Inversion Attack
by: Wang, Yinggui, et al.
Published: (2024)

Adaptive Diffusion Denoised Smoothing : Certified Robustness via Randomized Smoothing with Differentially Private Guided Denoising Diffusion
by: Shpilevskiy, Frederick, et al.
Published: (2025)

Is RobustBench/AutoAttack a suitable Benchmark for Adversarial Robustness?
by: Lorenz, Peter, et al.
Published: (2021)

Exploiting Cultural Biases via Homoglyphs in Text-to-Image Synthesis
by: Struppek, Lukas, et al.
Published: (2022)

BodhiPromptShield: Pre-Inference Prompt Mediation for Suppressing Privacy Propagation in LLM/VLM Agents
by: Ma, Bo, et al.
Published: (2026)

Model Inversion Robustness: Can Transfer Learning Help?
by: Ho, Sy-Tuyen, et al.
Published: (2024)

Megatron: Evasive Clean-Label Backdoor Attacks against Vision Transformer
by: Gong, Xueluan, et al.
Published: (2024)

Poisoning-based Backdoor Attacks for Arbitrary Target Label with Positive Triggers
by: Huang, Binxiao, et al.
Published: (2024)

Detecting AutoAttack Perturbations in the Frequency Domain
by: Lorenz, Peter, et al.
Published: (2021)

An Inversion-based Measure of Memorization for Diffusion Models
by: Ma, Zhe, et al.
Published: (2024)

We Can Always Catch You: Detecting Adversarial Patched Objects WITH or WITHOUT Signature
by: Li, Jiachun, et al.
Published: (2021)

Approximating Optimal Morphing Attacks using Template Inversion
by: Colbois, Laurent, et al.
Published: (2024)

CoLA: A Choice Leakage Attack Framework to Expose Privacy Risks in Subset Training
by: Li, Qi, et al.
Published: (2026)

DataFreeShield: Defending Adversarial Attacks without Training Data
by: Lee, Hyeyoon, et al.
Published: (2024)

EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models
by: Chen, Ruoxi, et al.
Published: (2023)

Rank Matters: Understanding and Defending Model Inversion Attacks via Low-Rank Feature Filtering
by: Yu, Hongyao, et al.
Published: (2024)

DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversion
by: Wang, Hanrui, et al.
Published: (2025)

FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models
by: Cui, Yingqian, et al.
Published: (2023)

Revisiting the Privacy Risks of Split Inference: A GAN-Based Data Reconstruction Attack via Progressive Feature Optimization
by: Qiu, Yixiang, et al.
Published: (2025)

SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation
by: Chung, Yunsung, et al.
Published: (2025)

Robustness of Practical Perceptual Hashing Algorithms to Hash-Evasion and Hash-Inversion Attacks
by: Madden, Jordan, et al.
Published: (2024)

Can't Slow me Down: Learning Robust and Hardware-Adaptive Object Detectors against Latency Attacks for Edge Devices
by: Wang, Tianyi, et al.
Published: (2024)

Universal Backdoor Attacks
by: Schneider, Benjamin, et al.
Published: (2023)

Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger
by: Yu, Yi, et al.
Published: (2024)

Modeling Deep Learning Based Privacy Attacks on Physical Mail
by: Huang, Bingyao, et al.
Published: (2020)

MMA-Diffusion: MultiModal Attack on Diffusion Models
by: Yang, Yijun, et al.
Published: (2023)

MADation: Face Morphing Attack Detection with Foundation Models
by: Caldeira, Eduarda, et al.
Published: (2025)

HoneypotNet: Backdoor Attacks Against Model Extraction
by: Wang, Yixu, et al.
Published: (2025)