Inversion Attacks against CNN Models Based on Timing Attack

Table 10

Potential structures of different networks and success rates.

	LeNet	ConvNet	AlexNet	SqueezeNet
Structure of networks	4	4	8	18
Candidate structures	4	6	12	25
Success rate	100%	66.67%	66.67%	72%