Trap-MID: Trapdoor-based Defense against Model Inversion Attacks

Zhen-Ting Liu, Shang-Tse Chen

Model Inversion (MI) attacks pose a significant threat to the privacy of Deep Neural Networks by recovering training data distribution from well-trained models. While existing defe…