Inversion Attacks against CNN Models Based on Timing Attack

Table 9

Library of convolution layers.

Parameters of convolution layers	Candidate values
Size of input pictures	7, 14, 28
Size of the convolution kernel	1, 3, 5
Input channel	16, 64, 128, 256
Output channel	[64, 128]
Stride	1, 2
Padding model	SAME