← Search

Carmela Troncoso

4 accepted papers

2024

Attack-Aware Noise Calibration for Differential Privacy

NeurIPS 2024poster

Differential privacy (DP) is a widely used approach for mitigating privacy risks when training machine learning models on sensitive data. DP mechanisms add noise during training to limit the risk of information leakage. The scale of the added noise is critical, as it determines the trade-off between…

Cited by 6SourcePDFScholar
2024

The Fundamental Limits of Least-Privilege Learning

ICML 2024poster

The promise of least-privilege learning – to find feature representations that are useful for a learning task but prevent inference of any sensitive information unrelated to this task – is highly appealing. However, so far this concept has only been stated informally. It thus remains an open questio…

Cited by 1SourcePDFScholar
2023

Transferable Adversarial Robustness for Categorical Data via Universal Robust Embeddings

NeurIPS 2023poster

Research on adversarial robustness is primarily focused on image and text data. Yet, many scenarios in which lack of robustness can result in serious risks, such as fraud detection, medical diagnosis, or recommender systems often do not rely on images or text but instead on tabular data. Adversarial…