# Model Inversion Attack Defense on CIFAR100 (val) Source: [Model Inversion Attack Defense on CIFAR100 (val)]() Collection index: [llms.txt]() Data updated: 2026-02-26T06:03:24.568Z Evaluation of defense mechanisms against Model Inversion Attacks performed on the CIFAR-100 validation set, measured using reconstruction fidelity metrics like SSIM and PSNR. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Model Inversion Attack Defense | | Dataset (including any stated split) | CIFAR100 (val) | | Metric | SSIM | | Unit | SCALAR | | Direction | Higher is better | | Results loaded | 28 of 28 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [SSIM](): Higher is better; unit: SCALAR. - [PSNR](): Higher is better; unit: SCALAR. ## Recorded results | Method | SSIM | Result date | Report paper | | --- | --- | --- | --- | | Bottleneck | 0.975 | Not recorded | 68fa77c91e209131cea7556d | | Bottleneck | 0.97 | Not recorded | 68fa77c91e209131cea7556d | | Bottleneck+CEM | 0.937 | Not recorded | 68fa77c91e209131cea7556d | | Dropout | 0.936 | Not recorded | 68fa77c91e209131cea7556d | | ResSFL | 0.935 | Not recorded | 68fa77c91e209131cea7556d | | DistCorr | 0.928 | Not recorded | 68fa77c91e209131cea7556d | | Dropout+CEM | 0.89 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_Nopeek | 0.89 | Not recorded | 68fa77c91e209131cea7556d | | DistCorr | 0.88 | Not recorded | 68fa77c91e209131cea7556d | | DistCorr+CEM | 0.877 | Not recorded | 68fa77c91e209131cea7556d | | ResSFL | 0.866 | Not recorded | 68fa77c91e209131cea7556d | | ResSFL+CEM | 0.866 | Not recorded | 68fa77c91e209131cea7556d | | Dropout | 0.865 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_Nopeek+CEM | 0.858 | Not recorded | 68fa77c91e209131cea7556d | | Bottleneck+CEM | 0.856 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_Nopeek | 0.841 | Not recorded | 68fa77c91e209131cea7556d | | Dropout+CEM | 0.816 | Not recorded | 68fa77c91e209131cea7556d | | DistCorr+CEM | 0.812 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_Nopeek+CEM | 0.797 | Not recorded | 68fa77c91e209131cea7556d | | ResSFL+CEM | 0.77 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_ARL | 0.691 | Not recorded | 68fa77c91e209131cea7556d | | PATROL | 0.634 | Not recorded | 68fa77c91e209131cea7556d | | PATROL+CEM | 0.603 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_ARL+CEM | 0.599 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_ARL | 0.521 | Not recorded | 68fa77c91e209131cea7556d | | PATROL | 0.478 | Not recorded | 68fa77c91e209131cea7556d | | Noise\_ARL+CEM | 0.457 | Not recorded | 68fa77c91e209131cea7556d | | PATROL+CEM | 0.44 | Not recorded | 68fa77c91e209131cea7556d | ### Bottleneck SSIM: 0.975. Result ID: 699569f43badfaffe65de5b6. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Bottleneck SSIM: 0.97. Result ID: 699569f43badfaffe65de5c4. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Bottleneck+CEM SSIM: 0.937. Result ID: 699569f43badfaffe65de5c5. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Dropout SSIM: 0.936. Result ID: 699569f43badfaffe65de5c8. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### ResSFL SSIM: 0.935. Result ID: 699569f43badfaffe65de5cc. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### DistCorr SSIM: 0.928. Result ID: 699569f43badfaffe65de5c6. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Dropout+CEM SSIM: 0.89. Result ID: 699569f43badfaffe65de5c9. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Noise\_Nopeek SSIM: 0.89. Result ID: 699569f43badfaffe65de5ce. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### DistCorr SSIM: 0.88. Result ID: 699569f43badfaffe65de5b8. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### DistCorr+CEM SSIM: 0.877. Result ID: 699569f43badfaffe65de5c7. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### ResSFL SSIM: 0.866. Result ID: 699569f43badfaffe65de5be. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### ResSFL+CEM SSIM: 0.866. Result ID: 699569f43badfaffe65de5cd. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Dropout SSIM: 0.865. Result ID: 699569f43badfaffe65de5ba. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Noise\_Nopeek+CEM SSIM: 0.858. Result ID: 699569f43badfaffe65de5cf. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Bottleneck+CEM SSIM: 0.856. Result ID: 699569f43badfaffe65de5b7. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Noise\_Nopeek SSIM: 0.841. Result ID: 699569f43badfaffe65de5c0. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Dropout+CEM SSIM: 0.816. Result ID: 699569f43badfaffe65de5bb. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### DistCorr+CEM SSIM: 0.812. Result ID: 699569f43badfaffe65de5b9. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Noise\_Nopeek+CEM SSIM: 0.797. Result ID: 699569f43badfaffe65de5c1. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### ResSFL+CEM SSIM: 0.77. Result ID: 699569f43badfaffe65de5bf. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Noise\_ARL SSIM: 0.691. Result ID: 699569f43badfaffe65de5d0. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### PATROL SSIM: 0.634. Result ID: 699569f43badfaffe65de5ca. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### PATROL+CEM SSIM: 0.603. Result ID: 699569f43badfaffe65de5cb. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Noise\_ARL+CEM SSIM: 0.599. Result ID: 699569f43badfaffe65de5d1. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"GAN-based MIA \[68\]"}. This record does not assert independent reproduction. ### Noise\_ARL SSIM: 0.521. Result ID: 699569f43badfaffe65de5c2. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### PATROL SSIM: 0.478. Result ID: 699569f43badfaffe65de5bc. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### Noise\_ARL+CEM SSIM: 0.457. Result ID: 699569f43badfaffe65de5c3. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. ### PATROL+CEM SSIM: 0.44. Result ID: 699569f43badfaffe65de5bd. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Attack Method":"Dec.-based MIA \[29\]"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.