Model Inversion Attack Defense on CIFAR100 (val)
0.975SSIMBottleneck
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| BottleneckAttack Method=Dec.-based MIA [29]2025.03 | 0.975 | 31.54 | |
| BottleneckAttack Method=GAN-based MIA [68]2025.03 | 0.97 | 30.96 | |
| Bottleneck+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.937 | 26.98 | |
| DropoutAttack Method=GAN-based MIA [68]2025.03 | 0.936 | 27.44 | |
| ResSFLAttack Method=GAN-based MIA [68]2025.03 | 0.935 | 26.98 | |
| DistCorrAttack Method=GAN-based MIA [68]2025.03 | 0.928 | 26.02 | |
| Dropout+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.89 | 24.94 | |
| Noise_NopeekAttack Method=GAN-based MIA [68]2025.03 | 0.89 | 24.2 | |
| DistCorrAttack Method=Dec.-based MIA [29]2025.03 | 0.88 | 22.67 | |
| DistCorr+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.877 | 23.46 | |
| ResSFLAttack Method=Dec.-based MIA [29]2025.03 | 0.866 | 22.92 | |
| ResSFL+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.866 | 23.37 | |
| DropoutAttack Method=Dec.-based MIA [29]2025.03 | 0.865 | 23.76 | |
| Noise_Nopeek+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.858 | 22.83 | |
| Bottleneck+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.856 | 22.36 | |
| Noise_NopeekAttack Method=Dec.-based MIA [29]2025.03 | 0.841 | 22 | |
| Dropout+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.816 | 22.21 | |
| DistCorr+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.812 | 21.3 | |
| Noise_Nopeek+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.797 | 20.8 | |
| ResSFL+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.77 | 20.31 | |
| Noise_ARLAttack Method=GAN-based MIA [68]2025.03 | 0.691 | 17.85 | |
| PATROLAttack Method=GAN-based MIA [68]2025.03 | 0.634 | 16.23 | |
| PATROL+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.603 | 15.96 | |
| Noise_ARL+CEMAttack Method=GAN-based MIA [68]2025.03 | 0.599 | 14.4 | |
| Noise_ARLAttack Method=Dec.-based MIA [29]2025.03 | 0.521 | 15.57 | |
| PATROLAttack Method=Dec.-based MIA [29]2025.03 | 0.478 | 14.74 | |
| Noise_ARL+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.457 | 16.27 | |
| PATROL+CEMAttack Method=Dec.-based MIA [29]2025.03 | 0.44 | 13.77 |