Skip to main content

Table 1 MSE, PSNR, SSIM for black-box reconstruction attack with different split point

From: Spears and shields: attacking and defending deep model co-inference in vehicular crowdsensing networks

Split Point

Layer 2

Layer 4

Layer 6

MSE

1.2451

279.6696

1695.814

PSNR

47.1787

23.6643

15.8371

SSIM

0.9997

0.8407

0.4214