AI: Data Extraction Attacks

For example, if you train image classifiers on sensitive data, attackers could steal that data. Instead of just getting predictions, they extract the actual training images themselves.

An
The security researcher Matt Fredrikson was able to show how images used to train a facial recognition model could be extracted by model inversion.