Dreaming to Distill: Data-free Knowledge Transfer via DeepInversion
Not on the map. Why?
Abstract (arXiv)
We introduce DeepInversion, a new method for synthesizing images from the image distribution used to train a deep neural network. We 'invert' a trained network (teacher) to synthesize class-conditional input images starting from random noise, without using any additional information about the training dataset. Keeping the teacher fixed, our method optimizes the input while regularizing the distribution of intermediate feature maps using information stored in the batch normalization layers of the teacher. Further, we improve the diversity of synthesized images using Adaptive DeepInversion, which maximizes the Jensen-Shannon divergence between the teacher and student network logits. The resulting synthesized images from networks trained on the CIFAR-10 and ImageNet datasets demonstrate high fidelity and degree of realism, and help enable a new breed of data-free applications - ones that do not require any real images or labeled data. We demonstrate the applicability of our proposed method to three tasks of immense practical importance -- (i) data-free network pruning, (ii) data-free knowledge transfer, and (iii) data-free continual learning. Code is available at https://github.com/NVlabs/DeepInversion
Key facts. Cited by 419 papers in the map (data through 7 Oct 2026). First posted on arXiv 18 Dec 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 75; 2022: 72; 2023: 94; 2024: 87; 2025: 55; 2026: 36.
419 papers.
Sort:
By area:
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
- 2021A Survey of Quantization Methods for Efficient Neural Network Inferencecited by 798
- 2022CODA-Prompt: COntinual Decomposed Attention-based Prompting for Rehearsal-Free Continual Learningcited by 446
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2023A Comprehensive Survey on Test-Time Adaptation under Distribution Shiftscited by 353
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 320
- 2023LLM-QAT: Data-Free Quantization Aware Training for Large Language Modelscited by 320
- 2021Unsolved Problems in ML Safetycited by 291
- 2021I-BERT: Integer-only BERT Quantizationcited by 250
- 2022Fine-tuning Global Model via Data-Free Knowledge Distillation for Non-IID Federated Learningcited by 172
- 2022Fake it till you make it: Learning transferable representations from synthetic ImageNet clonescited by 171
- 2021Source-Free Domain Adaptation for Semantic Segmentationcited by 168
38 more
- 2023Squeeze, Recover and Relabel: Dataset Condensation at ImageNet Scale From A New Perspectivecited by 136
- 2021Always Be Dreaming: A New Approach for Data-Free Class-Incremental Learningcited by 130
- 2022Reconstructing Training Data from Trained Neural Networkscited by 129
- 2023A Unified Continual Learning Framework with General Parameter-Efficient Tuningcited by 124
- 2022Self-Sustaining Representation Expansion for Non-Exemplar Class-Incremental Learningcited by 118
- 2021Dataset Inference: Ownership Resolution in Machine Learningcited by 115
- 2024Mitigating Catastrophic Forgetting in Large Language Models with Self-Synthesized Rehearsalcited by 114
- 2023Neural Collapse Inspired Feature-Classifier Alignment for Few-Shot Class Incremental Learningcited by 112
- 2023f-Divergence Minimization for Sequence-Level Knowledge Distillationcited by 112
- 2023On the Diversity and Realism of Distilled Dataset: An Efficient Dataset Distillation Paradigmcited by 107
- 2023A Comprehensive Survey on Source-free Domain Adaptationcited by 104
- 2021DENSE: Data-Free One-Shot Federated Learningcited by 100
- 2022Deep Unsupervised Domain Adaptation: A Review of Recent Advances and Perspectivescited by 98
- 2021Domain Impression: A Source Data Free Domain Adaptation Methodcited by 91
- 2022Source-Free Unsupervised Domain Adaptation: A Surveycited by 79
- 2022Variational Model Inversion Attackscited by 75
- 2022What do Vision Transformers Learn? A Visual Explorationcited by 75
- 2022Few-Shot Class-Incremental Learning via Entropy-Regularized Data-Free Replaycited by 70
- 2021Global Vision Transformer Pruning with Hessian-Aware Saliencycited by 69
- 2023Generalized Large-Scale Data Condensation via Various Backbone and Statistical Matchingcited by 69
- 2021Contrastive Model Inversion for Data-Free Knowledge Distillationcited by 66
- 2022DearKD: Data-Efficient Early Knowledge Distillation for Vision Transformerscited by 65
- 2021Towards Fair Federated Learning with Zero-Shot Data Augmentationcited by 64
- 2023TARGET: Federated Class-Continual Learning via Exemplar-Free Distillationcited by 64
- 2021Diversifying Sample Generation for Accurate Data-Free Quantizationcited by 63
- 2022Expanding Small-Scale Datasets with Guided Imaginationcited by 61
- 2022R-DFCIL: Relation-Guided Representation Learning for Data-Free Class Incremental Learningcited by 59
- 2022Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attackscited by 58
- 2022Towards Data-Free Model Stealing in a Hard Label Settingcited by 57
- 2022Patch Similarity Aware Data-Free Quantization for Vision Transformerscited by 55
- 2022A Closer Look at Rehearsal-Free Continual Learningcited by 54
- 2022GradViT: Gradient Inversion of Vision Transformerscited by 52
- 2023CodeLMSec Benchmark: Systematically Evaluating and Finding Security Vulnerabilities in Black-Box Code Language Modelscited by 52
- 2021A Fast Knowledge Distillation Framework for Visual Recognitioncited by 50
- 2021Graph-Free Knowledge Distillation for Graph Neural Networkscited by 46
- 2024Lightweight Adaptive Feature De-drifting for Compressed Image Classificationcited by 46
- 2021Zero-shot Adversarial Quantizationcited by 44
- 2022Do Gradient Inversion Attacks Make Federated Learning Unsafe?cited by 44
50 most cited of 419 All 419 (JSON)
- 2026CLASP: Continual Low-rank Adapters for Spatially Placed Concepts from One Hypernetwork1 Oct 2026
- 2026A Statistical Perspective on Knowledge Distillation: Foundations, Classical Methods, and Large Language Model Extensions27 Sep 2026
- 2026Is Human-Readable Text Necessary for Effective LLM Fine-Tuning?26 Sep 2026
- 2026Merge++: Universal Merge Refinement Through Data-Free Checkpoint Inversion19 Sep 2026
- 2026Parameter isolation with domain-specific experts for incremental audio classification13 Sep 2026
- 2026IDeaL: Data-Free Multi-Teacher Distillation via Improved Dead Leaves25 Aug 2026
- 2026Close Shortcut Wins Long: Seeking Diverse and Stable Generators for Data-Free Knowledge Distillation22 Aug 2026
- 2026UniDFKD: A Unified Semantic Prior Framework for Architecture-Agnostic Data-Free Knowledge Distillation10 Aug 2026
- 2026Theia: Large-Scale Multimodal Captioning and Automated Validation of the Incidents1M Dataset for Data-Free Distillation30 Jul 2026
- 2026HASTE: A Framework for Training-Free, Dynamic, and Steerable Compression of Pre-Trained Convolutional Neural Networks29 Jun 2026
- 2026Domain-incremental audio classification using domain-specific experts and prototype classifier22 Jun 2026
- 2026Channel Location Constrains the Auditability of Subliminal Learning20 Jun 2026
38 more
- 2026Interpretability Without Tradeoffs: Disentangling Polysemanticity At Equal Predictive Performance29 May 2026
- 2026Learning Through Noise: Why Subliminal Learning Works and When It Fails22 May 2026
- 2026Cognitive-Uncertainty Guided Knowledge Distillation for Accurate Classification of Student Misconceptions14 May 2026
- 2026STARS: Spike Tail-Aware Relational Synthesis for ANN-to-SNN Data-Free Knowledge Distillation12 May 2026
- 2026Stop Marginalizing My Dreams: Model Inversion via Laplace Kernel for Continual Learning12 May 2026
- 2026Provable Sparse Inversion and Token Relabel Enhanced One-shot Federated Learning with ViTs11 May 2026
- 2026Improving Diversity in Black-box Few-shot Knowledge Distillation28 Apr 2026
- 2026Soft Label Pruning and Quantization for Large-Scale Dataset Distillation20 Apr 2026
- 2026Big2Small: A Unifying Neural Network Framework for Model Compression31 Mar 2026
- 2026PruneFuse: Efficient Data Selection via Weight Pruning and Network Fusion27 Mar 2026
- 2026TabKD: Tabular Knowledge Distillation through Interaction Diversity of Learned Feature Bins16 Mar 2026
- 2026Residual SODAP: Residual Self-Organizing Domain-Adaptive Prompting with Structural Knowledge Preservation for Continual Learning13 Mar 2026
- 2026Domain-Adaptive Model Merging Across Disconnected Modes6 Mar 2026
- 2026FedDAG: Clustered Federated Learning via Global Data and Gradient Integration for Heterogeneous Environments26 Feb 2026
- 2026A Dataset is Worth 1 MB26 Feb 2026
- 2026Can Generative Artificial Intelligence Survive Data Contamination? Theoretical Guarantees under Contaminated Recursive Training17 Feb 2026
- 2026FedCARE: Federated Unlearning with Conflict-Aware Projection and Relearning-Resistant Recovery30 Jan 2026
- 2026Grounding and Enhancing Informativeness and Utility in Dataset Distillation29 Jan 2026
- 2026Privacy-Preserving Model Transcription with Differentially Private Synthetic Distillation27 Jan 2026
- 2026Towards Understanding Best Practices for Quantization of Vision-Language Models21 Jan 2026
- 2026Deep Leakage with Generative Flow Matching Denoiser21 Jan 2026
- 2026Attesting Model Lineage by Consisted Knowledge Evolution with Fine-Tuning Trajectory16 Jan 2026
- 2026FedBiCross: Personalized One-Shot Federated Learning on Medical Images5 Jan 2026
- 2026DiMEx: Breaking the Cold Start Barrier in Data-Free Model Extraction via Latent Diffusion Priors4 Jan 2026
- 2025InvCoSS: Inversion-driven Continual Self-supervised Learning in Medical Multi-modal Image Pre-training22 Dec 2025
- 2025Seeing the Whole Picture: Distribution-Guided Data-Free Distillation for Semantic Segmentation15 Dec 2025
- 2025Federated Domain Generalization with Latent Space Inversion11 Dec 2025
- 2025Optimizing Distributional Geometry Alignment with Optimal Transport for Generative Dataset Distillation29 Nov 2025
- 2025FedRE: A Representation Entanglement Framework for Model-Heterogeneous Federated Learning27 Nov 2025
- 2025Post-Pruning Accuracy Recovery via Data-Free Knowledge Distillation24 Nov 2025
- 2025ModHiFi: Identifying High Fidelity predictive components for Model Modification24 Nov 2025
- 2025AttackPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents24 Nov 2025
- 2025Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmetic24 Nov 2025
- 2025TRANSPORTER: Transferring Visual Semantics from VLM Manifolds23 Nov 2025
- 2025Adversarial Pseudo-replay for Exemplar-free Class-incremental Learning22 Nov 2025
- 2025Rectifying Soft-Label Entangled Bias in Long-Tailed Dataset Distillation22 Nov 2025
- 2025D4C: Data-Free Quantization for Contrastive Language-Image Pre-training Models19 Nov 2025
- 2025PRISM: Diversifying Dataset Distillation by Decoupling Architectural Priors13 Nov 2025
50 newest of 419 All 419 (JSON)
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2022Fake it till you make it: Learning transferable representations from synthetic ImageNet clonescited by 171
- 2023Class-Incremental Learning using Diffusion Model for Distillation and Replaycited by 31
- 2023Is Synthetic Data From Diffusion Models Ready for Knowledge Distillation?cited by 21
- 2024DKDM: Data-Free Knowledge Distillation for Diffusion Models with Any Architecturecited by 21
- 2025Data-free Knowledge Distillation with Diffusion Modelscited by 16
- 2023Expanding Expressiveness of Diffusion Models with Limited Data via Self-Distillation based Fine-Tuningcited by 11
- 2024One Category One Prompt: Dataset Distillation using Diffusion Modelscited by 5
- 2024Source-Free Domain Adaptation with Diffusion-Guided Source Data Generationcited by 4
- 2024Referee Can Play: An Alternative Approach to Conditional Generation via Model Inversioncited by 4
- 2023Towards Few-Call Model Stealing via Active Self-Paced Knowledge Distillation and Diffusion-Based Image Generationcited by 2
- 2025Reconstructing Template-Memorized Images from Natural Promptscited by 1
12 most cited of 17 All 17 (JSON)
- 2026CLASP: Continual Low-rank Adapters for Spatially Placed Concepts from One Hypernetwork1 Oct 2026
- 2026Deep Leakage with Generative Flow Matching Denoiser21 Jan 2026
- 2026DiMEx: Breaking the Cold Start Barrier in Data-Free Model Extraction via Latent Diffusion Priors4 Jan 2026
- 2025Reconstructing Template-Memorized Images from Natural Prompts10 Jul 2025
- 2025When Model Knowledge meets Diffusion Model: Diffusion-assisted Data-free Image Synthesis with Alignment of Domain and Class18 Jun 2025
- 2025Data-free Knowledge Distillation with Diffusion Models1 Apr 2025
- 2024Adversarial Purification by Consistency-aware Latent Space Optimization on Data Manifolds11 Dec 2024
- 2024DKDM: Data-Free Knowledge Distillation for Diffusion Models with Any Architecture5 Sep 2024
- 2024One Category One Prompt: Dataset Distillation using Diffusion Models11 Mar 2024
- 2024Referee Can Play: An Alternative Approach to Conditional Generation via Model Inversion26 Feb 2024
- 2024Source-Free Domain Adaptation with Diffusion-Guided Source Data Generation7 Feb 2024
- 2023Expanding Expressiveness of Diffusion Models with Limited Data via Self-Distillation based Fine-Tuning2 Nov 2023
12 newest of 17 All 17 (JSON)
- 2021Dataset Inference: Ownership Resolution in Machine Learningcited by 115
- 2023Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscationcited by 20
- 2022Few-Shot Unlearning by Model Inversioncited by 17
- 2024Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometricscited by 12
- 2024Dataset Size Recovery from LoRA Weightscited by 7
- 2024Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?cited by 5
- 2023CovarNav: Machine Unlearning via Model Inversion and Covariance Navigationcited by 2
- 2025Efficient and Stealthy Jailbreak Attacks via Adversarial Prompt Distillation from LLMs to SLMscited by 2
- 2026FedCARE: Federated Unlearning with Conflict-Aware Projection and Relearning-Resistant Recoverycited by 2
- 2024Inference Attacks Against Face Recognition Model without Classification Layerscited by 1
- 2024Have You Poisoned My Data? Defending Neural Networks against Data Poisoningcited by 1
- 2025ModHiFi: Identifying High Fidelity predictive components for Model Modificationcited by 1
12 most cited of 13 All 13 (JSON)
- 2026FedCARE: Federated Unlearning with Conflict-Aware Projection and Relearning-Resistant Recovery30 Jan 2026
- 2025ModHiFi: Identifying High Fidelity predictive components for Model Modification24 Nov 2025
- 2025Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmetic24 Nov 2025
- 2025Efficient and Stealthy Jailbreak Attacks via Adversarial Prompt Distillation from LLMs to SLMs26 May 2025
- 2024Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?5 Sep 2024
- 2024Dataset Size Recovery from LoRA Weights27 Jun 2024
- 2024Have You Poisoned My Data? Defending Neural Networks against Data Poisoning20 Mar 2024
- 2024Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics14 Feb 2024
- 2024Inference Attacks Against Face Recognition Model without Classification Layers24 Jan 2024
- 2023CovarNav: Machine Unlearning via Model Inversion and Covariance Navigation21 Nov 2023
- 2023Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation17 Mar 2023
- 2022Few-Shot Unlearning by Model Inversion31 May 2022
12 newest of 13 All 13 (JSON)
- 2025Synthetic Data is an Elegant GIFT for Continual Vision-Language Modelscited by 21
- 2024Select and Distill: Selective Dual-Teacher Knowledge Transfer for Continual Learning on Vision-Language Modelscited by 19
- 2022Generative Negative Text Replay for Continual Vision-Language Pretrainingcited by 18
- 2024One VLM to Keep it Learning: Generation and Balancing for Data-free Continual Visual Question Answeringcited by 6
- 2024Distilling Vision-Language Foundation Models: A Data-Free Approach via Prompt Diversificationcited by 5
- 2026Towards Understanding Best Practices for Quantization of Vision-Language Modelscited by 2
- 2025Simple yet Effective Semi-supervised Knowledge Distillation from Vision-Language Models via Dual-Head Optimizationcited by 1
- 2025MIMIC: Multimodal Inversion for Model Interpretation and Conceptualizationcited by 1
- 2026Theia: Large-Scale Multimodal Captioning and Automated Validation of the Incidents1M Dataset for Data-Free Distillationcited by 0
- 2026Theia: Large-Scale Multimodal Captioning and Automated Validation of the Incidents1M Dataset for Data-Free Distillation30 Jul 2026
- 2026Towards Understanding Best Practices for Quantization of Vision-Language Models21 Jan 2026
- 2025MIMIC: Multimodal Inversion for Model Interpretation and Conceptualization11 Aug 2025
- 2025Simple yet Effective Semi-supervised Knowledge Distillation from Vision-Language Models via Dual-Head Optimization12 May 2025
- 2025Synthetic Data is an Elegant GIFT for Continual Vision-Language Models6 Mar 2025
- 2024One VLM to Keep it Learning: Generation and Balancing for Data-free Continual Visual Question Answering4 Nov 2024
- 2024Distilling Vision-Language Foundation Models: A Data-Free Approach via Prompt Diversification21 Jul 2024
- 2024Select and Distill: Selective Dual-Teacher Knowledge Transfer for Continual Learning on Vision-Language Models14 Mar 2024
- 2022Generative Negative Text Replay for Continual Vision-Language Pretraining31 Oct 2022
- 2025Context-Free Synthetic Data Mitigates Forgettingcited by 5
- 2025Context-Free Synthetic Data Mitigates Forgetting20 May 2025
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
- 2021A Survey of Quantization Methods for Efficient Neural Network Inferencecited by 798
- 2022CODA-Prompt: COntinual Decomposed Attention-based Prompting for Rehearsal-Free Continual Learningcited by 446
- 2023A Comprehensive Survey on Test-Time Adaptation under Distribution Shiftscited by 353
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 320
- 2023LLM-QAT: Data-Free Quantization Aware Training for Large Language Modelscited by 320
- 2021Unsolved Problems in ML Safetycited by 291
- 2021I-BERT: Integer-only BERT Quantizationcited by 250
- 2022Fine-tuning Global Model via Data-Free Knowledge Distillation for Non-IID Federated Learningcited by 172
- 2021Source-Free Domain Adaptation for Semantic Segmentationcited by 168
- 2023Squeeze, Recover and Relabel: Dataset Condensation at ImageNet Scale From A New Perspectivecited by 136
- 2021Always Be Dreaming: A New Approach for Data-Free Class-Incremental Learningcited by 130
12 most cited of 375 All 375 (JSON)
- 2026A Statistical Perspective on Knowledge Distillation: Foundations, Classical Methods, and Large Language Model Extensions27 Sep 2026
- 2026Is Human-Readable Text Necessary for Effective LLM Fine-Tuning?26 Sep 2026
- 2026Merge++: Universal Merge Refinement Through Data-Free Checkpoint Inversion19 Sep 2026
- 2026Parameter isolation with domain-specific experts for incremental audio classification13 Sep 2026
- 2026IDeaL: Data-Free Multi-Teacher Distillation via Improved Dead Leaves25 Aug 2026
- 2026Close Shortcut Wins Long: Seeking Diverse and Stable Generators for Data-Free Knowledge Distillation22 Aug 2026
- 2026UniDFKD: A Unified Semantic Prior Framework for Architecture-Agnostic Data-Free Knowledge Distillation10 Aug 2026
- 2026HASTE: A Framework for Training-Free, Dynamic, and Steerable Compression of Pre-Trained Convolutional Neural Networks29 Jun 2026
- 2026Domain-incremental audio classification using domain-specific experts and prototype classifier22 Jun 2026
- 2026Channel Location Constrains the Auditability of Subliminal Learning20 Jun 2026
- 2026Interpretability Without Tradeoffs: Disentangling Polysemanticity At Equal Predictive Performance29 May 2026
- 2026Learning Through Noise: Why Subliminal Learning Works and When It Fails22 May 2026
12 newest of 375 All 375 (JSON)