Model Inversion Attacks That Exploit Confidence Information
Date: 2015-10
Affected: Face recognition systems, decision trees
Attack vector: model-inversion
Category: research
Severity: High

Fredrikson, Jha, and Ristenpart use prediction-confidence values to reconstruct recognizable face images from face-recognition models and to infer sensitive attributes from decision trees. Foundational model-inversion paper. ACM CCS 2015.


Mitigations:

Architectural layers (MAESTRO):