@inproceedings {255348,
	author = {Klas Leino and Matt Fredrikson},
	title = {Stolen Memories: Leveraging Model Memorization for Calibrated {White-Box} Membership Inference},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1605--1622},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/leino},
	publisher = {USENIX Association},
	month = aug
}
