Chinese contentOP-Print:针对在线自蒸馏模型的成员推断攻击研究
一篇隐私方向的新论文:自蒸馏模型原来会留下可被攻击的训练数据痕迹,OP-Print 用残差信号和重启稳定性就能把成员识别出来,基线全都失效。
一篇隐私方向的新论文:自蒸馏模型原来会留下可被攻击的训练数据痕迹,OP-Print 用残差信号和重启稳定性就能把成员识别出来,基线全都失效。
This research provides a new method for evaluating privacy risks in machine learning models, which is important for developers and researchers working on AI systems.