通过频率解和潜在空间优化改进模型反转
JiaShuai Yang1,2, Bin Wen3,4, JiaTeng Zhao1,2
1School of Information Scinence and Technology , Hainan Normal University, Haikou, 571158, China.
Scientific reports
|November 29, 2025
概括
本研究介绍了改进模型反转攻击的先进技术,增强了从AI模型中重建私人训练图像的功能. 新方法克服了现有方法的局限性,导致性能明显提高.
科学领域:
- 人工智能的人工智能
- 机器学习安全 机器学习安全
- 计算机视觉 隐私 隐私 计算机视觉
背景情况:
- 模型倒置攻击通过从AI模型中重建训练数据,构成重大隐私风险.
- 现有的基于网络的生成对抗方法在特征合和优化困难样本方面扎.
研究的目的:
- 开发一种用于增强模型反转攻击的新方法.
- 解决目前针对隐私攻击的生成对抗网络方法的局限性.
主要方法:
- 使用可学习过器进行频率脱,用于多尺度特征融合.
- 为精确的潜向量构造提供Top-K初始化.
- 动态焦点边界损失以集中精力在具有挑战性的样本上.
主要成果:
- 在CelebA,FFHQ和FaceScrub数据集上显著改善了攻击性能.
- 在模型倒置中有效处理大数据分布转移.
- 加强了私人培训图像的重建.
结论:
- 拟议的方法在模型逆转攻击能力方面提供了实质性的进步.
- 频率脱,Top-K初始化和动态焦点边界损失有效地减轻了现有的挑战.
- 这项研究强调了人工智能持续需要强大的隐私保护技术.
更多相关视频
11:14A Novel Experimental and Analytical Approach to the Multimodal Neural Decoding of Intent During Social Interaction in Freely-behaving Human Infants
Published on: October 4, 2015
11.4K
06:44Age-dependent Dynamics of Locomotion in Caenorhabditis elegans: A Lyapunov Exponent Analysis
Published on: September 23, 2025
480
相关概念视频
Linear Approximation in Frequency Domain
332
Linear systems are characterized by two main properties: superposition and homogeneity. Superposition allows the response to multiple inputs to be the sum of the responses to each individual input. Homogeneity ensures that scaling an input by a scalar results in the response being scaled by the same scalar.
In contrast, nonlinear systems do not inherently possess these properties. However, for small deviations around an operating point, a nonlinear system can often be approximated as linear....
In contrast, nonlinear systems do not inherently possess these properties. However, for small deviations around an operating point, a nonlinear system can often be approximated as linear....
332
Discrete Fourier Transform
827
The Discrete Fourier Transform (DFT) is a fundamental tool in signal processing, extending the discrete-time Fourier transform by evaluating discrete signals at uniformly spaced frequency intervals. This transformation converts a finite sequence of time-domain samples into frequency components, each representing complex sinusoids ordered by frequency. The DFT translates these sequences into the frequency domain, effectively indicating the magnitude and phase of each frequency component present...
827
Discrete-Time Fourier Series
635
The Discrete-Time Fourier Series (DTFS) is a fundamental concept in signal processing, serving as the discrete-time counterpart to the continuous-time Fourier series. It allows for the representation and analysis of discrete-time periodic signals in terms of their frequency components. Unlike its continuous counterpart, which utilizes integrals, the calculation of DTFS expansion coefficients involves summations due to the discrete nature of the signal.
For a discrete-time periodic signal x[n]...
For a discrete-time periodic signal x[n]...
635
Construction of Frequency Distribution
12.0K
A frequency distribution table can be constructed using the steps given below.
First, make a table with two columns—one with the title of the data that needs to be organized, and the other column for frequency. [Draw a third column for tally marks if needed]. Then, take a look at the items given in the data set and decide if an ungrouped frequency distribution table or a grouped frequency distribution table would be more suitable. If there are large sets of different values, then it is...
First, make a table with two columns—one with the title of the data that needs to be organized, and the other column for frequency. [Draw a third column for tally marks if needed]. Then, take a look at the items given in the data set and decide if an ungrouped frequency distribution table or a grouped frequency distribution table would be more suitable. If there are large sets of different values, then it is...
12.0K
Discrete-time Fourier transform
1000
The Discrete-Time Fourier Transform (DTFT) is an essential mathematical tool for analyzing discrete-time signals, converting them from the time domain to the frequency domain. This transformation allows for examining the frequency components of discrete signals, providing insights into their spectral characteristics. In the DTFT, the continuous integral used in the continuous-time Fourier transform is replaced by a summation to accommodate the discrete nature of the signal.
One of the notable...
One of the notable...
1000
Properties of Fourier Transform II
705
The Fourier Transform (FT) is an essential mathematical tool in signal processing, transforming a time-domain signal into its frequency-domain representation. This transformation elucidates the relationship between time and frequency domains through several properties, each revealing unique aspects of signal behavior.
The Frequency Shifting property of Fourier Transforms highlights that a shift in the frequency domain corresponds to a phase shift in the time domain. Mathematically, if x(t) has...
The Frequency Shifting property of Fourier Transforms highlights that a shift in the frequency domain corresponds to a phase shift in the time domain. Mathematically, if x(t) has...
705
