1. Instahide: Instance-hiding schemes for private distributed learning;huang;Proc Int Conf Mach Learn,0
2. Neuracrypt: Hiding private health data via random neural networks for public training;yala,2021
3. Is Private Learning Possible with Instance Encoding?
4. Neuracrypt is not private;carlini,2021
5. Patches are all you need;trockman;Proc Int Conf Learn Representations,2022