Model Inversion Attacks: Reconstructing Faces and Voices from Model Weights
Faits validés
Fredrikson et al. / Carnegie Mellon. Shows how attackers, through targeted queries to a trained recognition system, can reconstruct the face or biometric traits of people in the training set.
En termes simples
The composite sketch from the shadows: Ask often enough 'Does this look like John Doe?' and you can puzzle the real passport photo of John back together from the probabilities.
Pertinence sécurité & conseil pratique
Proves that AI models are not 'anonymous' black boxes but can mirror personal data.