322 citations · 945 across the 33 of their papers we have counts for
5 papers · 1 filter
Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano
Chuan Guo, Alexandre Sablayrolles, Maziar Sanjabi
Differential privacy (DP) is by far the most widely accepted framework for mitigating privacy risks in machine learning. However, exactly how small the privacy parameter needs…
TAN Without a Burn: Scaling Laws of DP-SGD
Tom Sander, Pierre Stock, Alexandre Sablayrolles
Differentially Private methods for training Deep Neural Networks (DNNs) have progressed recently, in particular with the use of massive batches and aggregated data augmentations fo…
CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning
Samuel Maddock, Alexandre Sablayrolles, Pierre Stock
Federated Learning (FL) is a setting for training machine learning models in distributed environments where the clients do not share their raw data but instead send model updates t…
Optimal Membership Inference Bounds for Adaptive Composition of Sampled Gaussian Mechanisms
Saeed Mahloujifar, Alexandre Sablayrolles, Graham Cormode +1
Given a trained model and a data sample, membership-inference (MI) attacks predict whether the sample was in the model's training set. A common countermeasure against MI attacks is…
Defending against Reconstruction Attacks with Rényi Differential Privacy
Pierre Stock, Igor Shilov, Ilya Mironov +1
Reconstruction attacks allow an adversary to regenerate data samples of the training set using access to only a trained model. It has been recently shown that simple heuristics can…