Privacy Evaluation on ChestMNIST
0.722Reconstruction SSIMRaw features (no defense)
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Raw features (no defense)Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features2026.05 | 0.722 | 0.635 | 1.3 | |
| KNT w/o permutation (ReLU + key)Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features2026.05 | 0.698 | 0.634 | 1 | |
| NoPeekBackbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features2026.05 | 0.691 | 0.615 | 0.6 | |
| Spatial permutation (keyed)Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features2026.05 | 0.686 | 0.624 | 0.8 | |
| KNT w/o ReLU (linear, keyed)Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features, Layers=linear2026.05 | 0.68 | 0.607 | 0.6 | |
| KNT (full, 2-layer)Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features, Layers=2-layer2026.05 | 0.665 | 0.586 | 0.5 | |
| KNT w/o key (non-secret W)Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features2026.05 | 0.664 | 0.59 | 0.4 | |
| Gaussian noisesigma=3.0, Backbone=ResNet-18 layer-4, Feature dimension (d)=512, Evaluation protocol=post-hoc frozen features2026.05 | 0.647 | 0.61 | 0.7 |