Subject Membership Inference Attacks in Federated Learning
We propose a notion of neuron sensitivity in terms of adversarial robustness, along with an attack that works as well as PGD. The notion can be extended as a regularization term, providing adversarial robustness without adversarial training.
Virendra J. Marathe
Daniel W. Peterson