Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning

arXiv:2404.13860v1 Announce Type: cross
Abstract: A Model Inversion (MI) attack based on Generative Adversarial Networks (GAN) aims to recover the private training data from complex deep learning models by searching codes in the latent space. However, they merely search a deterministic latent space such that the found latent code is usually suboptimal. In addition, the existing distributional MI schemes assume that an attacker can access the structures and parameters of the target model, which is not always viable in practice. …

adversarial agent arxiv attack box code cs.cr cs.lg data deep learning found gan generative generative adversarial networks networks private recover search space training training data