Inversion Attacks against CNN Models Based on Timing Attack

Figure 2

The difference of measured time when  = “SAME” and  = “VALID”.