Membership Inference Attack against Differentially Private Deep Learning Model
Calibrating Noise to Sensitivity in Private Data Analysis