Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacy

Rob Romijnders, Antti Koskela

The hidden state threat model of differential privacy (DP) assumes that the adversary has access only to the final trained machine learning (ML) model, without seeing intermediate…