Module providing model inversion attacks.
- class art.attacks.inference.reconstruction.DatabaseReconstruction(estimator)¶
Implementation of a database reconstruction attack. In this case, the adversary is assumed to have in his/her possession a model trained on a dataset, and all but one row of that training dataset. This attack attempts to reconstruct the missing row.
Create a DatabaseReconstruction instance.
estimator – Trained target estimator.
- static objective(x, y, x_train, y_train, private_estimator, parent_model, params)¶
Objective function which we seek to minimise
- reconstruct(x: ndarray, y: Optional[ndarray] = None, **kwargs) Tuple[ndarray, ndarray] ¶
Infer the missing row from x, y with which estimator was trained with.
- Return type
ndarray) – Known records of the training set of estimator.
y – Known labels of the training set of estimator.