Defending Model Inversion and Membership Inference Attacks via Prediction Purification

Ziqi Yang, Bin Shao, Bohan Xuan +2

Neural networks are susceptible to data inference attacks such as the model inversion attack and the membership inference attack, where the attacker could infer the reconstruction…