Privacy & Training Data Extraction

Memorization, membership inference attacks, verbatim extraction, and differential privacy.