Model Inversion Attacks: Reconstructing Faces and Voices from Model Weights
Hechos validados
Fredrikson et al. / Carnegie Mellon. Shows how attackers, through targeted queries to a trained recognition system, can reconstruct the face or biometric traits of people in the training set.
Explicación sencilla
The composite sketch from the shadows: Ask often enough 'Does this look like John Doe?' and you can puzzle the real passport photo of John back together from the probabilities.
Relevancia de seguridad y consejo práctico
Proves that AI models are not 'anonymous' black boxes but can mirror personal data.
Fuente primaria / referencia
- CMU Security Research