Classifier-to-Generator Attack: Estimation of Training Data Distribution from Classifier

no code implementations • ICLR 2018 • Kosuke Kusano, Jun Sakuma

In face recognition, we show that, when an adversary obtains a face recognition model for a set of individuals, PreImageGAN allows the adversary to extract face images of specific individuals contained in the set, even when the adversary has no knowledge of the face of the individuals.

Classification Face Recognition +2