#attribute-privacy News & Analysis

Robust Privacy: Inference-Stage Privacy through Certified Robustness

Researchers introduce Robust Privacy (RP), an inference-stage privacy framework that leverages certified robustness principles to prevent adversaries from inferring sensitive attributes or reconstructing training data from model predictions. The approach significantly outperforms differential privacy methods, reducing model inversion attack success rates from 73% to 4% while maintaining 98.4% accuracy, though it remains vulnerable to function-level extraction through model distillation.