A Methodology for Formalizing Model-Inversion Attacks
Impossibility of distributed consensus with one faulty process