Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909311104450560 |
|---|---|
| author | Fang, Hao Qiu, Yixiang Yu, Hongyao Yu, Wenbo Kong, Jiawei Chong, Baoli Chen, Bin Wang, Xuan Xia, Shu-Tao Xu, Ke |
| author_facet | Fang, Hao Qiu, Yixiang Yu, Hongyao Yu, Wenbo Kong, Jiawei Chong, Baoli Chen, Bin Wang, Xuan Xia, Shu-Tao Xu, Ke |
| contents | Deep Neural Networks (DNNs) have revolutionized various domains with their exceptional performance across numerous applications. However, Model Inversion (MI) attacks, which disclose private information about the training dataset by abusing access to the trained models, have emerged as a formidable privacy threat. Given a trained network, these attacks enable adversaries to reconstruct high-fidelity data that closely aligns with the private training samples, posing significant privacy concerns. Despite the rapid advances in the field, we lack a comprehensive and systematic overview of existing MI attacks and defenses. To fill this gap, this paper thoroughly investigates this realm and presents a holistic survey. Firstly, our work briefly reviews early MI studies on traditional machine learning scenarios. We then elaborately analyze and compare numerous recent attacks and defenses on Deep Neural Networks (DNNs) across multiple modalities and learning tasks. By meticulously analyzing their distinctive features, we summarize and classify these methods into different categories and provide a novel taxonomy. Finally, this paper discusses promising research directions and presents potential solutions to open issues. To facilitate further study on MI attacks and defenses, we have implemented an open-source model inversion toolbox on GitHub (https://github.com/ffhibnese/Model-Inversion-Attack-ToolBox). |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2402_04013 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses Fang, Hao Qiu, Yixiang Yu, Hongyao Yu, Wenbo Kong, Jiawei Chong, Baoli Chen, Bin Wang, Xuan Xia, Shu-Tao Xu, Ke Computer Vision and Pattern Recognition Deep Neural Networks (DNNs) have revolutionized various domains with their exceptional performance across numerous applications. However, Model Inversion (MI) attacks, which disclose private information about the training dataset by abusing access to the trained models, have emerged as a formidable privacy threat. Given a trained network, these attacks enable adversaries to reconstruct high-fidelity data that closely aligns with the private training samples, posing significant privacy concerns. Despite the rapid advances in the field, we lack a comprehensive and systematic overview of existing MI attacks and defenses. To fill this gap, this paper thoroughly investigates this realm and presents a holistic survey. Firstly, our work briefly reviews early MI studies on traditional machine learning scenarios. We then elaborately analyze and compare numerous recent attacks and defenses on Deep Neural Networks (DNNs) across multiple modalities and learning tasks. By meticulously analyzing their distinctive features, we summarize and classify these methods into different categories and provide a novel taxonomy. Finally, this paper discusses promising research directions and presents potential solutions to open issues. To facilitate further study on MI attacks and defenses, we have implemented an open-source model inversion toolbox on GitHub (https://github.com/ffhibnese/Model-Inversion-Attack-ToolBox). |
| title | Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2402.04013 |