diff --git a/README.md b/README.md
index a4b1e68..b8d0995 100644
--- a/README.md
+++ b/README.md
@@ -51,6 +51,10 @@ CVPR 2020 - The Secret Revealer: Generative Model-Inversion Attacks Against Deep
 APSIPA ASC 2020 - Deep Face Recognizer Privacy Attack: Model Inversion Initialization by a Deep Generative Adversarial Data Space Discriminator.
 [[paper]](https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=9306253&casa_token=AWugOvIe0I0AAAAA:9wICCkMcfoljMqooM-lgl8m-6F6-cEl-ClHgNkE1SV8mZwqvBIaJ1HDjT1RWLyBz_P7tdB51jQVL&tag=1)
 
+IJCAI 2021 - Contrastive Model Inversion for Data-Free Knowledge Distillation.
+[[paper]](https://www.ijcai.org/proceedings/2021/0327.pdf)
+[[code]](https://github.com/zju-vipa/CMI)
+
 CCS 2021 - Membership Leakage in Label-Only Exposures.
 [[paper]](https://yangzhangalmo.github.io/papers/CCS21-Label.pdf)
 [[code]](https://github.com/zhenglisec/decision-based-mia)