An attack that queries a model and studies its outputs to rebuild sensitive details of the data it was trained on.
If an LLM is trained on sensitive enterprise IP, adversaries can prompt it systematically to reproduce parts of the original training documents. Defending against Model Inversion requires Output Sanitization, Differential Privacy during training, and secure enterprise boundaries that keep unauthorized endpoints from reaching the model.
See also Differential Privacy, Secure Enterprise Boundaries, Air-Gapped Environment, Role-Based Access Control and Zero Trust Architecture.