# Model Inversion Defense on CIFAR10 (val)

Source: [Model Inversion Defense on CIFAR10 (val)](<https://www.sota2.com/research/sota/model-inversion-defense-on-cifar10-val>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T06:03:24.581Z

Evaluation of defense mechanisms against Model Inversion Attacks performed on the CIFAR-10 validation set, measured using reconstruction fidelity metrics like SSIM and PSNR.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Model Inversion Defense |
| Dataset (including any stated split) | CIFAR10 (val) |
| Metric | SSIM |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 28 of 28 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [SSIM](<https://www.sota2.com/research/sota/model-inversion-defense-on-cifar10-val.md?metric=SSIM>): Higher is better; unit: PERCENT.

- [PSNR](<https://www.sota2.com/research/sota/model-inversion-defense-on-cifar10-val.md?metric=PSNR>): Higher is better; unit: SCALAR.

## Recorded results

| Method | SSIM | Result date | Report paper |
| --- | --- | --- | --- |
| Bottleneck | 86.3 | Not recorded | 68fa77c91e209131cea7556d |
| Bottleneck | 86.1 | Not recorded | 68fa77c91e209131cea7556d |
| Bottleneck+CEM | 81.3 | Not recorded | 68fa77c91e209131cea7556d |
| Bottleneck+CEM | 78.3 | Not recorded | 68fa77c91e209131cea7556d |
| DistCorr | 78 | Not recorded | 68fa77c91e209131cea7556d |
| DistCorr | 77.9 | Not recorded | 68fa77c91e209131cea7556d |
| DistCorr+CEM | 76 | Not recorded | 68fa77c91e209131cea7556d |
| DistCorr+CEM | 75.7 | Not recorded | 68fa77c91e209131cea7556d |
| Dropout | 73.3 | Not recorded | 68fa77c91e209131cea7556d |
| Dropout | 72.9 | Not recorded | 68fa77c91e209131cea7556d |
| Dropout+CEM | 68.7 | Not recorded | 68fa77c91e209131cea7556d |
| Dropout+CEM | 68.2 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_Nopeek | 66.8 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_Nopeek | 66.4 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_Nopeek+CEM | 65.1 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_Nopeek+CEM | 64.3 | Not recorded | 68fa77c91e209131cea7556d |
| ResSFL | 63.9 | Not recorded | 68fa77c91e209131cea7556d |
| ResSFL | 59.5 | Not recorded | 68fa77c91e209131cea7556d |
| ResSFL+CEM | 58.3 | Not recorded | 68fa77c91e209131cea7556d |
| ResSFL+CEM | 57.1 | Not recorded | 68fa77c91e209131cea7556d |
| PATROL | 55.8 | Not recorded | 68fa77c91e209131cea7556d |
| PATROL | 53.7 | Not recorded | 68fa77c91e209131cea7556d |
| PATROL+CEM | 52 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_ARL | 51.8 | Not recorded | 68fa77c91e209131cea7556d |
| PATROL+CEM | 50.6 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_ARL+CEM | 50.2 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_ARL | 50.1 | Not recorded | 68fa77c91e209131cea7556d |
| Noise\_ARL+CEM | 48.4 | Not recorded | 68fa77c91e209131cea7556d |

### Bottleneck

SSIM: 86.3. Result ID: 699569f43badfaffe65de5e0.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Bottleneck

SSIM: 86.1. Result ID: 699569f43badfaffe65de5e1.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Bottleneck+CEM

SSIM: 81.3. Result ID: 699569f43badfaffe65de5e2.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Bottleneck+CEM

SSIM: 78.3. Result ID: 699569f43badfaffe65de5e3.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### DistCorr

SSIM: 78. Result ID: 699569f43badfaffe65de5e5.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### DistCorr

SSIM: 77.9. Result ID: 699569f43badfaffe65de5e4.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### DistCorr+CEM

SSIM: 76. Result ID: 699569f43badfaffe65de5e7.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### DistCorr+CEM

SSIM: 75.7. Result ID: 699569f43badfaffe65de5e6.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Dropout

SSIM: 73.3. Result ID: 699569f43badfaffe65de5e9.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Dropout

SSIM: 72.9. Result ID: 699569f43badfaffe65de5e8.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Dropout+CEM

SSIM: 68.7. Result ID: 699569f43badfaffe65de5eb.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Dropout+CEM

SSIM: 68.2. Result ID: 699569f43badfaffe65de5ea.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Noise\_Nopeek

SSIM: 66.8. Result ID: 699569f43badfaffe65de5f5.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Noise\_Nopeek

SSIM: 66.4. Result ID: 699569f43badfaffe65de5f4.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Noise\_Nopeek+CEM

SSIM: 65.1. Result ID: 699569f43badfaffe65de5f7.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Noise\_Nopeek+CEM

SSIM: 64.3. Result ID: 699569f43badfaffe65de5f6.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### ResSFL

SSIM: 63.9. Result ID: 699569f43badfaffe65de5f1.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### ResSFL

SSIM: 59.5. Result ID: 699569f43badfaffe65de5f0.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### ResSFL+CEM

SSIM: 58.3. Result ID: 699569f43badfaffe65de5f3.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### ResSFL+CEM

SSIM: 57.1. Result ID: 699569f43badfaffe65de5f2.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### PATROL

SSIM: 55.8. Result ID: 699569f43badfaffe65de5ed.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### PATROL

SSIM: 53.7. Result ID: 699569f43badfaffe65de5ec.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### PATROL+CEM

SSIM: 52. Result ID: 699569f43badfaffe65de5ef.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Noise\_ARL

SSIM: 51.8. Result ID: 699569f43badfaffe65de5f9.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### PATROL+CEM

SSIM: 50.6. Result ID: 699569f43badfaffe65de5ee.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Noise\_ARL+CEM

SSIM: 50.2. Result ID: 699569f43badfaffe65de5fb.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"GAN-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

### Noise\_ARL

SSIM: 50.1. Result ID: 699569f43badfaffe65de5f8.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":false}. This record does not assert independent reproduction.

### Noise\_ARL+CEM

SSIM: 48.4. Result ID: 699569f43badfaffe65de5fa.

[Reporting paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa77c91e209131cea7556d.md>)

[Implementation](<https://github.com/xiasong0501/CEM>)

Recorded evaluation configuration: {"MIA Attack Protocol":"Dec.-based MIA","CEM Integration":true}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.