Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting
A Methodology for Formalizing Model-Inversion Attacks