Gradient Inversion Attack on CIFAR-100
21.39PSNRNo DP
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| No DPAttack Method=GIFD2026.02 | 21.39 | 0.47 | — | |
| No DPAttack Method=IG2026.02 | 14.1 | 0.3 | — | |
| TIPAttack Method=GIFD2026.02 | 10.7 | 0.04 | — | |
| AGPAttack Method=GIFD2026.02 | 10.3 | 0.04 | — | |
| DPAttack Method=GIFD2026.02 | 9.4 | 0.02 | — | |
| TIPAttack Method=IG2026.02 | 8.73 | 0.01 | — | |
| DPAttack Method=IG2026.02 | 8.2 | 0.005 | — | |
| AGPAttack Method=IG2026.02 | 7.93 | 0.001 | — | |
| Differential Privacy (DP1)Attack Strength=50%, Privacy Budget (epsilon)=0.52025.12 | — | — | 0.547 | |
| Differential Privacy (DP2)Attack Strength=50%, Privacy Budget (epsilon)=0.72025.12 | — | — | 0.423 | |
| No DefenseAttack Strength=50%2025.12 | — | — | 0.26 | |
| OPEAttack Strength=50%2025.12 | — | — | 0.358 | |
| PRIVEE-DPAttack Strength=50%, Privacy Budget (epsilon)=0.12025.12 | — | — | 21.903 | |
| PRIVEE-DP++Attack Strength=50%2025.12 | — | — | 21.311 | |
| R(1)Attack Strength=50%2025.12 | — | — | 0.124 | |
| R(2)Attack Strength=50%2025.12 | — | — | 0.127 |