{"data":{"id":"19c896b4-2c58-4e94-9168-658625c3c1e6","title":"Learning to Defend: Auto-Augmentation Search Against Model Inversion Attacks","summary":"This research paper introduces DAAS (Defense via Auto-Augmentation Search) against Model Inversion Attacks, which can recover private training data from model weights or outputs. The authors note that existing defenses offer incomplete protection and that input-level defenses have been limited to simple transformations. DAAS automatically identifies augmentation candidates with strong privacy-utility trade-offs from a large pool, and the authors report superior defense performance across models, datasets and attacks.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy","research"],"sourceUrl":"http://ieeexplore.ieee.org/document/11510512","publishedAt":"2026-05-06T13:20:54.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["membership_inference"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-05-06T13:20:54.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality"],"aiComponentTargeted":"training_data","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":"peer_reviewed","atlasIds":["AML.T0024.000"]}}