Model Inversion Attack on TinyImageNet-200
37Attack AccuracyDATM
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| DATMModel Arch.=ConvNet, IPC=502026.03 | 37 | 1,253.8 | |
| DATMModel Arch.=VGG11-BN, IPC=502026.03 | 37 | 1,285.4 | |
| SelMatchModel Arch.=ConvNet, IPC=502026.03 | 37 | 1,264.8 | |
| MTTModel Arch.=ConvNet, IPC=502026.03 | 36 | 1,306.8 | |
| MTTModel Arch.=VGG11-BN, IPC=502026.03 | 36 | 1,324.9 | |
| FTDModel Arch.=ConvNet, IPC=502026.03 | 36 | 1,309.4 | |
| FTDModel Arch.=AlexNet, IPC=502026.03 | 36 | 1,318.4 | |
| FTDModel Arch.=ResNet18, IPC=252026.03 | 36 | 1,320.7 | |
| FTDModel Arch.=ResNet18, IPC=502026.03 | 36 | 1,302.8 | |
| FTDModel Arch.=VGG11-BN, IPC=502026.03 | 36 | 1,321.4 | |
| DATMModel Arch.=ConvNet, IPC=252026.03 | 36 | 1,287.4 | |
| DATMModel Arch.=AlexNet, IPC=252026.03 | 36 | 1,317.2 | |
| DATMModel Arch.=AlexNet, IPC=502026.03 | 36 | 1,299.4 | |
| DATMModel Arch.=ResNet18, IPC=252026.03 | 36 | 1,307.8 | |
| DATMModel Arch.=ResNet18, IPC=502026.03 | 36 | 1,297 | |
| SelMatchModel Arch.=ResNet18, IPC=502026.03 | 36 | 1,289.5 | |
| SelMatchModel Arch.=VGG11-BN, IPC=252026.03 | 36 | 1,306.7 | |
| SelMatchModel Arch.=VGG11-BN, IPC=502026.03 | 36 | 1,294.8 | |
| SeqMatchModel Arch.=VGG11-BN, IPC=502026.03 | 36 | 1,305.8 | |
| MTTModel Arch.=AlexNet, IPC=252026.03 | 35 | 1,363.7 | |
| MTTModel Arch.=AlexNet, IPC=502026.03 | 35 | 1,327.8 | |
| MTTModel Arch.=ResNet18, IPC=502026.03 | 35 | 1,323.5 | |
| FTDModel Arch.=AlexNet, IPC=102026.03 | 35 | 1,342.8 | |
| FTDModel Arch.=AlexNet, IPC=252026.03 | 35 | 1,347.3 | |
| FTDModel Arch.=ResNet18, IPC=102026.03 | 35 | 1,328.4 | |
| FTDModel Arch.=VGG11-BN, IPC=252026.03 | 35 | 1,311.7 | |
| DATMModel Arch.=ConvNet, IPC=102026.03 | 35 | 1,325.6 | |
| DATMModel Arch.=ResNet18, IPC=102026.03 | 35 | 1,331.5 | |
| DATMModel Arch.=VGG11-BN, IPC=102026.03 | 35 | 1,326.9 | |
| DATMModel Arch.=VGG11-BN, IPC=252026.03 | 35 | 1,343.9 | |
| SelMatchModel Arch.=ConvNet, IPC=102026.03 | 35 | 1,337.1 | |
| SelMatchModel Arch.=ConvNet, IPC=252026.03 | 35 | 1,346.2 | |
| SelMatchModel Arch.=AlexNet, IPC=252026.03 | 35 | 1,322.2 | |
| SelMatchModel Arch.=AlexNet, IPC=502026.03 | 35 | 1,298.4 | |
| SelMatchModel Arch.=ResNet18, IPC=252026.03 | 35 | 1,317.3 | |
| SeqMatchModel Arch.=ConvNet, IPC=502026.03 | 35 | 1,327.1 | |
| SeqMatchModel Arch.=AlexNet, IPC=502026.03 | 35 | 1,348.3 | |
| SeqMatchModel Arch.=ResNet18, IPC=252026.03 | 35 | 1,371.8 | |
| SeqMatchModel Arch.=ResNet18, IPC=502026.03 | 35 | 1,362.1 | |
| MTTModel Arch.=ConvNet, IPC=252026.03 | 34 | 1,344.2 | |
| MTTModel Arch.=ResNet18, IPC=252026.03 | 34 | 1,352.8 | |
| MTTModel Arch.=VGG11-BN, IPC=252026.03 | 34 | 1,368.9 | |
| FTDModel Arch.=ConvNet, IPC=252026.03 | 34 | 1,324.7 | |
| FTDModel Arch.=VGG11-BN, IPC=102026.03 | 34 | 1,342.7 | |
| DATMModel Arch.=AlexNet, IPC=102026.03 | 34 | 1,347.8 | |
| SelMatchModel Arch.=AlexNet, IPC=102026.03 | 34 | 1,351.2 | |
| SelMatchModel Arch.=VGG11-BN, IPC=102026.03 | 34 | 1,363.2 | |
| SeqMatchModel Arch.=ConvNet, IPC=252026.03 | 34 | 1,354.6 | |
| SeqMatchModel Arch.=AlexNet, IPC=252026.03 | 34 | 1,363.8 | |
| SeqMatchModel Arch.=ResNet18, IPC=102026.03 | 34 | 1,382 | |
| SeqMatchModel Arch.=VGG11-BN, IPC=102026.03 | 34 | 1,361.7 | |
| SeqMatchModel Arch.=VGG11-BN, IPC=252026.03 | 34 | 1,350.1 | |
| MTTModel Arch.=AlexNet, IPC=102026.03 | 33 | 1,382.1 | |
| FTDModel Arch.=ConvNet, IPC=102026.03 | 33 | 1,374.6 | |
| SelMatchModel Arch.=ResNet18, IPC=102026.03 | 33 | 1,368.5 | |
| SeqMatchModel Arch.=ConvNet, IPC=102026.03 | 33 | 1,365.9 | |
| SeqMatchModel Arch.=AlexNet, IPC=102026.03 | 33 | 1,358.3 | |
| MTTModel Arch.=ConvNet, IPC=102026.03 | 32 | 1,359.2 | |
| MTTModel Arch.=ResNet18, IPC=102026.03 | 32 | 1,402.8 | |
| MTTModel Arch.=VGG11-BN, IPC=102026.03 | 32 | 1,376.9 |