Machine Learning, NLP, Computer Vision, Information Retrieval, Transformers.
the hypothetical adversary has perfect full access to each intermediate weight update, for instance. But in a real setting, we can refine further these constraints into more realistic ones. For instance, the case where an adversary has only access to the final model, or only its predictions via an