1. Training Data Reconstruction: Privacy due to Uncertainty?
- Author
-
Runkel, Christina, Gandikota, Kanchana Vaishnavi, Geiping, Jonas, Schönlieb, Carola-Bibiane, and Moeller, Michael
- Subjects
Computer Science - Machine Learning ,Computer Science - Cryptography and Security - Abstract
Being able to reconstruct training data from the parameters of a neural network is a major privacy concern. Previous works have shown that reconstructing training data, under certain circumstances, is possible. In this work, we analyse such reconstructions empirically and propose a new formulation of the reconstruction as a solution to a bilevel optimisation problem. We demonstrate that our formulation as well as previous approaches highly depend on the initialisation of the training images $x$ to reconstruct. In particular, we show that a random initialisation of $x$ can lead to reconstructions that resemble valid training samples while not being part of the actual training dataset. Thus, our experiments on affine and one-hidden layer networks suggest that when reconstructing natural images, yet an adversary cannot identify whether reconstructed images have indeed been part of the set of training samples.
- Published
- 2024