Stacking seven black-box estimators into a meta-classifier reveals persistent membership leakage in differentially private federated learning models at epsilon=200 on NIST genomics data, outperforming single-signal baselines.
Evaluating Differential Privacy in Federated Learn- ing Based on Membership Inference Attacks
2 Pith papers cite this work. Polarity classification is still indexing.
2
Pith papers citing it