diff --git a/README.md b/README.md
index 3cf1f12..8bfd452 100755
--- a/README.md
+++ b/README.md
@@ -164,6 +164,7 @@ Reconstruction attacks cover also attacks known as *model inversion* and *attrib
 - [**Variational Model Inversion Attacks**](https://arxiv.org/abs/2201.10787) (Wang et al., 2021)
 - [**Reconstructing Training Data with Informed Adversaries**](https://arxiv.org/abs/2201.04845) (Balle et al., 2022)
 - [**Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks**](https://arxiv.org/abs/2201.12179) (Struppek et al., 2022)
+- [**Privacy Vulnerability of Split Computing to Data-Free Model Inversion Attacks**](https://arxiv.org/abs/2107.06304) (Dong et al., 2022)