Model Inversion Defense on CIFAR10 (val)
86.3SSIMBottleneck
Evaluation results
| Method | Links | ||
|---|---|---|---|
| BottleneckMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 86.3 | 23.82 | |
| BottleneckMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 86.1 | 23.46 | |
| Bottleneck+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 81.3 | 22.36 | |
| Bottleneck+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 78.3 | 20.96 | |
| DistCorrMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 78 | 20.55 | |
| DistCorrMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 77.9 | 20.86 | |
| DistCorr+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 76 | 20.17 | |
| DistCorr+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 75.7 | 20.31 | |
| DropoutMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 73.3 | 19.54 | |
| DropoutMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 72.9 | 19.82 | |
| Dropout+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 68.7 | 18.47 | |
| Dropout+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 68.2 | 18.72 | |
| Noise_NopeekMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 66.8 | 17.82 | |
| Noise_NopeekMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 66.4 | 17.98 | |
| Noise_Nopeek+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 65.1 | 17.49 | |
| Noise_Nopeek+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 64.3 | 17.59 | |
| ResSFLMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 63.9 | 16.14 | |
| ResSFLMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 59.5 | 16.19 | |
| ResSFL+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 58.3 | 15.63 | |
| ResSFL+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 57.1 | 16 | |
| PATROLMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 55.8 | 15.12 | |
| PATROLMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 53.7 | 15.33 | |
| PATROL+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 52 | 14.59 | |
| Noise_ARLMIA Attack Protocol=GAN-based MIA, CEM Integration=false2025.03 | 51.8 | 14.65 | |
| PATROL+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 50.6 | 14.74 | |
| Noise_ARL+CEMMIA Attack Protocol=GAN-based MIA, CEM Integration=true2025.03 | 50.2 | 14.4 | |
| Noise_ARLMIA Attack Protocol=Dec.-based MIA, CEM Integration=false2025.03 | 50.1 | 14.73 | |
| Noise_ARL+CEMMIA Attack Protocol=Dec.-based MIA, CEM Integration=true2025.03 | 48.4 | 14.48 |