arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2301.07557cs.LGcs.AIcs.CR
收藏

基于采样预训练扩散模型的靶向图像重建

Targeted Image Reconstruction by Sampling Pre-trained Diffusion Model

Lehigh University(理海大学)

Jiageng Zheng

摘要:

经训练的神经网络模型包含关于训练数据的信息。给定这样的模型,恶意方可以利用该模型中的“知识”,并设计方法来打印出任何可用的信息(称为模型反演攻击)。因此,探讨如何进行这种攻击并证明其严重性是有价值的。在这项工作中,我们提出了通过使用预先训练的扩散模型来生成目标类的数据点的方法,而无需确切的目标分布的先验知识。

英文摘要:

A trained neural network model contains information on the training data. Given such a model, malicious parties can leverage the "knowledge" in this model and design ways to print out any usable information (known as model inversion attack). Therefore, it is valuable to explore the ways to conduct a such attack and demonstrate its severity. In this work, we proposed ways to generate a data point of the target class without prior knowledge of the exact target distribution by using a pre-trained diffusion model.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑