training-data-privacy

This paper challenges the prevailing view that rote memorization causes training data exposure to reconstruction attacks, showing instead that adversarial non-robust features are the true cause. The authors introduce AntiAdversarial Training (AT-AT) that intentionally learns non-robust features to achieve superior reconstruction defense and higher accuracy.