From Pixels to Privacy-Sensitive Features: An Information-Theoretic Framework for Reconstruction Bounds
DGX agentarXiv:2610.13768v1 Announce Type: cross Abstract: What can an adversary recover from a model trained with DP-SGD? Its (arepsilon,elta) guarantee does not answer this question directly. We derive a dis