token reduction

New SARA attack bypasses Vision Transformer privacy defenses

A new research paper details a feature inversion attack called SARA that can reconstruct input images from Vision Transformer (ViT) embeddings transmitted in split-inference systems. The attack demonstrates that token s…