Membership Inference Attacks Against Adversarially Robust Deep Learning Models - Liwei Song (IEEE, 2020)
10.1109/SPW.2019.00021