Model Inversion Attack Against Transfer Learning: Inverting a Model Without Querying It
Rattachement africain : au, mo, cn. Niveau de preuve : code pays fourni par la source.
Le résumé fourni par la source
Transfer learning is an important approach that produces pre-trained teacher models which can be used to quickly build specialized student models. However, recent research on transfer learning has found that it is vulnerable to various attacks, e.g., misclassification and backdoor attacks. However, it is still not clear whether transfer learning is vulnerable to model inversion attacks. Launching a model inversion attack against transfer learning scheme is challenging. Not only does the student model hide its structural parameters, but it is also not queried to the adversary. Hence, when targeting a student model, existing model inversion attacks fail, as they typically rely on querying the target model. In this paper, we initiate research into model inversion attacks against transfer learning with two novel attack methods. Both are black-box attacks, suiting different situations, that do not rely on queries to the target student model. In the first method, the adversary has the data samples that share the same distribution as the training set of the teacher model. In the second method, the adversary does not have any such samples. Experiments show that highly recognizable data records can be inverted with both of these methods. This research underscores the critical insight that even when a model is shielded from public queries, it can still be susceptible to model inversion attacks.
Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.
Le contrôle bibliographique ouvert
DOI retrouvé dans Crossref DOI retrouvé ; titre concordant.
- Titre Crossref
- Model Inversion Attack Against Transfer Learning: Inverting a Model Without Querying It
- Date Crossref
- 01/07/2025
- Éditeur
- Institute of Electrical and Electronics Engineers (IEEE)
- Type
- journal-article
Ce recoupement confirme des métadonnées liées au DOI. Il ne confirme ni la méthode ni les conclusions de l’étude, et il ne compte pas comme une seconde source scientifique indépendante.
Où se fait cette recherche
-
University of Technology Sydney pays non établi dans la noticeUniversité ou école supérieure
-
City University of Macau Institute of Data Science pays non établi dans la noticeUniversité ou école supérieure
-
Zhejiang University of Science and Technology pays non établi dans la noticeUniversité ou école supérieure
-
School of Computer Science pays non établi dans la noticeUniversité ou école supérieure
-
Faculty of Data Science pays non établi dans la noticeUniversité ou école supérieure
-
College of Computer Science and Technology pays non établi dans la noticeUniversité ou école supérieure
University of Technology Sydney, Institute of Data Science — City University of Macau et Zhejiang University of Science and Technology, avec 3 autres affiliations.
Une affiliation ne permet pas de déduire la nationalité d’un auteur.