Jiaxi Liang

What Your Features Reveal: Data-Efficient Black-Box Feature Inversion Attack for Split DNNs

Split DNNs enable edge devices by offloading intensive computation to a cloud server, but this paradigm exposes privacy vulnerabilities, as the intermediate features can be exploited to reconstruct the private inputs via Feature Inversion Attack (FIA). Existing FIA methods often produce limited reco