Florian Kerschbaum

Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference

2021 · arXiv (Cornell University)

Differentially private training algorithms provide protection against one of the most popular attacks in machine learning: the membership inference attack. However, these privacy algorithms incur a loss of the model's classification accuracy, therefore creating a …