Jan Schuchardt

The paper shows that using random cropping, a standard data augmentation technique, can naturally amplify differential privacy guarantees for machine learning models without requiring any changes to the training process.

The paper proposes a novel framework using the primal-dual perspective of differential privacy to provide a unified, modular, and end-to-end robustness certification for complex machine learning models against joint backdoor attacks.