Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inference

A. Rahimi and B. Recht, “Random features for large-scale kernel machines,” in Proceedings of the 20th International Conference on Neural Information Processing Systems

2007

Earlier work this paper cites.

C. Dwork, “Differential privacy: A survey of results,” in International Conference on Theory and Applications of Models of Computation

2008

Earlier work this paper cites.

R. Sarathy and K. Muralidhar, “Evaluating Laplace noise addition to satisfy differential privacy for numeric data.,” Transactions on Data Privacy

2011

Earlier work this paper cites.

F. Rubio and X. Mestre, “Spectral convergence for a general class of random matrices,” Statistics & Probability Letters

2011

Earlier work this paper cites.

R. D. Cook and L. Forzani, “On the mean and variance of the generalized inverse of a singular Wishart matrix,” Electronic Journal of Statistics

2011

Earlier work this paper cites.

PhD thesis, University of California, San Diego, 2012

Y. Cho, Kernel Methods for Deep Learning · 2012

Earlier work this paper cites.

R. Shokri, M. Stronati, C. Song, and V. Shmatikov, “Membership inference attacks against machine learning models,” in IEEE Symposium on Security and Privacy

2017

Earlier work this paper cites.

Y. Long, V. Bindschaedler, and C. A. Gunter, “Towards measuring membership privacy,” arXiv preprint arXiv:1712.09136

Original

2017

Earlier work this paper cites.

S. Yeom, I. Giacomelli, M. Fredrikson, and S. Jha, “Privacy risk in machine learning: Analyzing the connection to overfitting,” in IEEE 31st Computer Security Foundations Symposium

2018

Earlier work this paper cites.

A. Salem, Y. Zhang, M. Humbert, P. Berrang, M. Fritz, and M. Backes, “Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models,” arXiv preprint arXiv:1806.01246

Original

2018

Earlier work this paper cites.

M. Bun, J. Ullman, and S. Vadhan, “Fingerprinting codes and the price of approximate differential privacy,” SIAM Journal on Computing

2018

Earlier work this paper cites.

T. Hastie, A. Montanari, S. Rosset, and R. J. Tibshirani, “Surprises in high-dimensional ridgeless least squares interpolation,” arXiv preprint arXiv:1903.08560

Original

2019

Earlier work this paper cites.

M. Belkin, D. Hsu, S. Ma, and S. Mandal, “Reconciling modern machine-learning practice and the classical bias–variance trade-off,” Proceedings of the National Academy of Sciences

2019

Earlier work this paper cites.

A. Sablayrolles, M. Douze, C. Schmid, Y. Ollivier, and H. Jégou, “White-box vs black-box: Bayes optimal strategies for membership inference,” in International Conference on Machine Learning

2019

Cited alongside, same era.

K. Leino and M. Fredrikson, “Stolen memories: Leveraging model memorization for calibrated white-box membership inference,” in 29th USENIX Security Symposium

2020

Cited alongside, same era.

Y. Wang, C. Wang, Z. Wang, S. Zhou, H. Liu, J. Bi, C. Ding, and S. Rajasekaran, “Against membership inference attack: Pruning is all you need,” arXiv preprint arXiv:2008.13578

Original

2020

Cited alongside, same era.

M. Belkin, D. Hsu, and J. Xu, “Two models of double descent for weak features,” SIAM Journal on Mathematics of Data Science

2020

Cited alongside, same era.

P. L. Bartlett, P. M. Long, G. Lugosi, and A. Tsigler, “Benign overfitting in linear regression,” Proceedings of the National Academy of Sciences

Y. Dar, V. Muthukumar, and R. G. Baraniuk, “A farewell to the bias-variance tradeoff? an overview of the theory of overparameterized machine learning,” arXiv preprint arXiv:2109.02355

Original

2021

Later among the works it cites.

N. Carlini, S. Chien, M. Nasr, S. Song, A. Terzis, and F. Tramer, “Membership inference attacks from first principles,” arXiv preprint arXiv:2112.03570

Original

2021

Later among the works it cites.

H. Hu, Z. Salcic, G. Dobbie, and X. Zhang, “Membership inference attacks on machine learning: A survey,” arXiv preprint arXiv:2103.07853

Original

2021

Later among the works it cites.

E. Galinkin, “The influence of dropout on membership inference in differentially private models,” arXiv preprint arXiv:2103.09008

Original

2021

Later among the works it cites.