Shailen K. Smith

Reducing information dependency does not cause training data privacy. Adversarially non-robust features do

Rasmus Torp, Shailen K. Smith, Adam Breuer

In this paper, we challenge the prevailing view that information dependency (including rote memorization) drives training data exposure to image reconstruction attacks. We show that extensive exposure can persist without rote memorization and is instead caused by a tunable connec…Read more