loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Mathias Parisot 1 ; Balázs Pejó 2 and Dayana Spagnuelo 3

Affiliations: 1 University of Amsterdam, Amsterdam, The Netherlands ; 2 CrySyS Lab, Dept. of Networked Systems and Services, Budapest Univ. of Technology and Economics, Budapest, Hungary ; 3 Vrije Universiteit Amsterdam, Amsterdam, The Netherlands

Keyword(s): Property Inference Attacks, Convolutional Neural Networks, Model Complexity.

Abstract: Machine learning models’ goal is to make correct predictions for specific tasks by learning important properties and patterns from data. By doing so, there is a chance that the model learns properties that are unrelated to its primary task. Property Inference Attacks exploit this and aim to infer from a given model (i.e., the target model) properties about the training dataset seemingly unrelated to the model’s primary goal. If the training data is sensitive, such an attack could lead to privacy leakage. In this paper, we investigate the influence of the target model’s complexity on the accuracy of this type of attack, focusing on convolutional neural network classifiers. We perform attacks on models that are trained on facial images to predict whether someone’s mouth is open. Our attacks’ goal is to infer whether the training dataset is balanced gender-wise. Our findings reveal that the risk of a privacy breach is present independently of the target model’s complexity: for all studi ed architectures, the attack’s accuracy is clearly over the baseline. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 18.234.165.107

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Parisot, M.; Pejó, B. and Spagnuelo, D. (2021). Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model’s Complexity. In Proceedings of the 18th International Conference on Security and Cryptography - SECRYPT; ISBN 978-989-758-524-1; ISSN 2184-7711, SciTePress, pages 715-721. DOI: 10.5220/0010555607150721

@conference{secrypt21,
author={Mathias Parisot. and Balázs Pejó. and Dayana Spagnuelo.},
title={Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model’s Complexity},
booktitle={Proceedings of the 18th International Conference on Security and Cryptography - SECRYPT},
year={2021},
pages={715-721},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010555607150721},
isbn={978-989-758-524-1},
issn={2184-7711},
}

TY - CONF

JO - Proceedings of the 18th International Conference on Security and Cryptography - SECRYPT
TI - Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model’s Complexity
SN - 978-989-758-524-1
IS - 2184-7711
AU - Parisot, M.
AU - Pejó, B.
AU - Spagnuelo, D.
PY - 2021
SP - 715
EP - 721
DO - 10.5220/0010555607150721
PB - SciTePress