Gradient Inversion Attack on MNIST
0.018MSENo Defense
Evaluation Results
| Method | Links | |
|---|---|---|
| No DefenseAttack Strength=25%2025.12 | 0.018 | |
| No DefenseAttack Strength=50%2025.12 | 0.034 | |
| R(2)Attack Strength=25%2025.12 | 0.065 | |
| R(1)Attack Strength=25%2025.12 | 0.068 | |
| R(2)Attack Strength=50%2025.12 | 0.113 | |
| R(1)Attack Strength=50%2025.12 | 0.116 | |
| No DefenseAttack Strength=75%2025.12 | 0.144 | |
| R(1)Attack Strength=75%2025.12 | 0.144 | |
| R(2)Attack Strength=75%2025.12 | 0.144 | |
| OPEAttack Strength=25%2025.12 | 0.299 | |
| OPEAttack Strength=50%2025.12 | 0.334 | |
| OPEAttack Strength=75%2025.12 | 0.341 | |
| DPepsilon=0.7, Attack Strength=25%2025.12 | 0.453 | |
| Differential Privacy (DP2)Attack Strength=50%, Privacy Budget (epsilon)=0.72025.12 | 0.481 | |
| DPepsilon=0.5, Attack Strength=25%2025.12 | 0.589 | |
| DPAttack Strength=75%, epsilon=0.72025.12 | 0.598 | |
| Differential Privacy (DP1)Attack Strength=50%, Privacy Budget (epsilon)=0.52025.12 | 0.637 | |
| DPAttack Strength=75%, epsilon=0.52025.12 | 0.945 | |
| PRIVEE-DP++Attack Strength=75%2025.12 | 2.635 | |
| PRIVEE-DPAttack Strength=75%, epsilon=0.12025.12 | 17.505 | |
| PRIVEE-DPepsilon=0.1, Attack Strength=25%2025.12 | 20.596 | |
| PRIVEE-DPAttack Strength=50%, Privacy Budget (epsilon)=0.12025.12 | 22.109 | |
| PRIVEE-DP++Attack Strength=25%2025.12 | 26.025 | |
| PRIVEE-DP++Attack Strength=50%2025.12 | 27.75 |