Why it matters

Property inference threatens data confidentiality. Understanding shapes defense.

Advertisement

The architecture

Attacker: shadow models with varied property.

Meta-classifier learns to detect.

Property inference flowShadow modelsvaried propertiesMeta-classifierlearns detectionQuery targetinfer propertyThreatens organizations that train on demographic-sensitive data
Property inference.
Advertisement

How it works end to end

Shadow models: attacker trains many with different property values.

Extract features from target.

Meta-classifier predicts.

DP training helps.