Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks

The at&t database of faces, 2002

A. L. Cambridge · 2002

Earlier work this paper cites.

Learning multiple layers of features from tiny images

A. Krizhevsky and G. Hinton · 2009

Earlier work this paper cites.

Convolutional deep belief networks on cifar-10

A. Krizhevsky and G. Hinton · 2010

Earlier work this paper cites.

Very deep convolutional networks for large-scale image recognition

Original

K. Simonyan and A. Zisserman · 2014

Earlier work this paper cites.

Model inversion attacks that exploit confidence information and basic countermeasures

M. Fredrikson, S. Jha, and T. Ristenpart · 2015

Earlier work this paper cites.

Explaining and harnessing adversarial examples. corr (2015)

I. J. Goodfellow, J. Shlens, and C. Szegedy · 2015

Earlier work this paper cites.

Deepdream-a code example for visualizing neural networks

A. Mordvintsev, C. Olah, and M. Tyka · 2015

Earlier work this paper cites.

Visualizing deep convolutional neural networks using natural pre-images

A. Mahendran and A. Vedaldi · 2016

Cited alongside, same era.

Distillation as a defense to adversarial perturbations against deep neural networks

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami · 2016

Cited alongside, same era.

Stealing machine learning models via prediction apis

F. Tramèr, F. Zhang, A. Juels, M. K. Reiter, and T. Ristenpart · 2016

Cited alongside, same era.

Wide residual networks

Original

S. Zagoruyko and N. Komodakis · 2016

Cited alongside, same era.

Adversarial examples are not easily detected: Bypassing ten detection methods

N. Carlini and D. Wagner · 2017

Cited alongside, same era.

Deep models under the gan: information leakage from collaborative deep learning

Conditional image synthesis with auxiliary classifier gans

A. Odena, C. Olah, and J. Shlens · 2017

Later among the works it cites.

Membership inference attacks against machine learning models

R. Shokri, M. Stronati, C. Song, and V. Shmatikov · 2017

Later among the works it cites.

Generative poisoning attack method against neural networks

Original

C. Yang, Q. Wu, H. Li, and Y. Chen · 2017

Later among the works it cites.

Defense against adversarial attacks using high-level representation guided denoiser

F. Liao, M. Liang, Y. Dong, T. Pang, X. Hu, and J. Zhu · 2018

Later among the works it cites.

Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models

Original

A. Salem, Y. Zhang, M. Humbert, M. Fritz, and M. Backes · 2018

Later among the works it cites.