Privacy
-
Gradient Inversion Attacks in Federated Learning
Federated learning ships gradients instead of data. Gradient inversion turns those updates back into training examples, and every defense costs accuracy.
-
Training Data Extraction from LLMs: Attacks and Defenses
How attackers extract memorized training data from LLMs, from GPT-2 to ChatGPT, how to measure it on Pythia, and which defenses and GDPR tests apply.
-
Membership Inference Attacks on Production ML APIs
Shokri et al.'s shadow-model attack is the canonical reference, but the gap between the paper's threat model and a real rate-limited API is wide.