#training-data

Model Inversion Attacks: Reconstructing Training Data from Output

From Fredrikson's pharmacogenetics exploit to Geiping's gradient inversion, model inversion attacks recover private training data in ways most ML