Inversion Attacks against CNN Models Based on Timing Attack

Figure 5

Measured time and theoretical time.