Unstoppable Attack: Label-Only Model Inversion via Conditional Diffusion Model

Rongke Liu, Dong Wang, Yizhi Ren +4

Model inversion attacks (MIAs) aim to recover private data from inaccessible training sets of deep learning models, posing a privacy threat. MIAs primarily focus on the white-box s…