4 ms·

So this is to counter stuff like GAN's (generative adversarial networks) [1] to reverse engineer data out of a black box systems? Like Yahoo's NSFW [2] classif

So this is to counter stuff like GAN's (generative adversarial networks) [1] to reverse engineer data out of a black box systems? Like Yahoo's NSFW [2] classifier for example. [1] https://en.wikipedia.org/wiki/Generative_adversarial_networks https://en.wikipedia.org/wiki/Generative_adversarial_network... [1] https://arxiv.org/abs/1406.2661 https://arxiv.org/abs/1406.2661 [2] https://github.com/yahoo/open_nsfw https://github.com/yahoo/open_nsfw

pizza 10y ago
No, not really. This is about keeping the model private. I think that the confusion is because of [0] and [1] being similarly titled but basically completely unrelated in meaning. See also [2] and [3] [0] https://en.wikipedia.org/wiki/Adversarial_machine_learning https://en.wikipedia.org/wiki/Adversarial_machine_learning [1] https://en.wikipedia.org/wiki/Generative_adversarial_networks https://en.wikipedia.org/wiki/Generative_adversarial_network... [2] https://en.wikipedia.org/wiki/Homomorphic_encryption https://en.wikipedia.org/wiki/Homomorphic_encryption [3] https://en.wikipedia.org/wiki/Differential_privacy https://en.wikipedia.org/wiki/Differential_privacy