@inproceedings{mehnaz2022your,
  title={Are your sensitive attributes private? novel model inversion attribute inference attacks on classification models},
  author={Mehnaz, Shagufta and Dibbo, Sayanton V and De Viti, Roberta and Kabir, Ehsanul and Brandenburg, Bj{\"o}rn B and Mangard, Stefan and Li, Ninghui and Bertino, Elisa and Backes, Michael and De Cristofaro, Emiliano and others},
  booktitle={31st USENIX Security Symposium (USENIX Security 22)},
  pages={4579--4596},
  year={2022}
}