← Search

Mengda Yang

4 accepted papers

2025

From Head to Tail: Efficient Black-box Model Inversion Attack via Long-tailed Learning

CVPR 2025poster

Model Inversion Attacks (MIAs) aim to reconstruct private training data from models, leading to privacy leakage, particularly in facial recognition systems. Although many studies have enhanced the effectiveness of white-box MIAs, less attention has been paid to improving efficiency and utility under…

2024

A Stealthy Wrongdoer: Feature-Oriented Reconstruction Attack against Split Learning

CVPR 2024poster

Split Learning (SL) is a distributed learning framework renowned for its privacy-preserving features and minimal computational requirements. Previous research consistently highlights the potential privacy breaches in SL systems by server adversaries reconstructing training data. However these studie…

2023

GAN You See Me? Enhanced Data Reconstruction Attacks against Split Inference

NeurIPS 2023poster

Split Inference (SI) is an emerging deep learning paradigm that addresses computational constraints on edge devices and preserves data privacy through collaborative edge-cloud approaches. However, SI is vulnerable to Data Reconstruction Attacks (DRA), which aim to reconstruct users' private predicti…

Cited by 5SourcePDFScholar
2022

Measuring Data Reconstruction Defenses in Collaborative Inference Systems

NeurIPS 2022accept

The collaborative inference systems are designed to speed up the prediction processes in edge-cloud scenarios, where the local devices and the cloud system work together to run a complex deep-learning model. However, those edge-cloud collaborative inference systems are vulnerable to emerging reconst…

Cited by 10SourcePDFScholar