@inproceedings {236216, author = {Nicholas Carlini and Chang Liu and {\'U}lfar Erlingsson and Jernej Kos and Dawn Song}, title = {The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks}, booktitle = {28th USENIX Security Symposium (USENIX Security 19)}, year = {2019}, isbn = {978-1-939133-06-9}, address = {Santa Clara, CA}, pages = {267--284}, url = {https://www.usenix.org/conference/usenixsecurity19/presentation/carlini}, publisher = {USENIX Association}, month = aug }