art.attacks.inference.reconstruction

Module providing model inversion attacks.

Database Reconstruction

class art.attacks.inference.reconstruction.DatabaseReconstruction(estimator)

Implementation of a database reconstruction attack. In this case, the adversary is assumed to have in his/her possession a model trained on a dataset, and all but one row of that training dataset. This attack attempts to reconstruct the missing row.

__init__(estimator)

Create a DatabaseReconstruction instance.

Parameters

estimator – Trained target estimator.

static objective(x, y, x_train, y_train, private_estimator, parent_model, params)

Objective function which we seek to minimise

reconstruct(x: ndarray, y: Optional[ndarray] = None, **kwargs) → Tuple[ndarray, ndarray]

Infer the missing row from x, y with which estimator was trained with.

Return type

Tuple

Parameters

• x (ndarray) – Known records of the training set of estimator.

• y – Known labels of the training set of estimator.