Machine Learning in Biomedical Imaging, Helmholtz Munich, Neuherberg, Germany; Mathematical Foundations of AI, LMU Munich, Munich, Germany; AI in Medicine and Healthcare, Technical University of Munich, Munich, Germany
Georgios Kaissis, Alexander Ziller, Stefan Kolek, Anneliese Riess, Daniel Rueckert
Differential Privacy;Membership Inference Attack;Hypothesis Testing;Data Reconstruction Attack;Security
Optimal privacy guarantees for a relaxed threat model: Addressing sub-optimal adversaries in differentially private machine learning