Authors:
Anvith Thudi and Hengrui Jia, University of Toronto and Vector Institute; Casey Meehan, UC San Diego; Ilia Shumailov, University of Oxford; Nicolas Papernot, University of Toronto and Vector Institute
![](https://www.usenix.org/sites/all/modules/usenix/usenix_files/images/usenix-locked.png)
Anvith Thudi and Hengrui Jia, University of Toronto and Vector Institute; Casey Meehan, UC San Diego; Ilia Shumailov, University of Oxford; Nicolas Papernot, University of Toronto and Vector Institute