#gradient-inversion

Model Inversion Attacks: Reconstructing Training Data from Model Outputs

From Fredrikson's pharmacogenetics exploit to Geiping's gradient inversion, model inversion attacks recover private training data in ways most ML engineers don't expect.