Optimal privacy guarantees for a relaxed threat model: Addressing sub-optimal adversaries in differentially private machine learning
Georgios Kaissis Alexander Ziller Stefan Kolek Anneliese Riess Daniel Rueckert