Course introduction
Privacy definitions and attack taxonomy
Course introduction
Privacy definitions and attack taxonomy
Extraction and memorization
Membership inference and attack evaluation
Privacy attacks: conclusions and discussion
Security notions and adversarial ML overview
Adversarial examples and robustness
Poisoning, backdoors, and ML security defenses
No class: break
Anonymization, linkage, and k-anonymity
Differential privacy: definitions
Differential privacy (continued)
No class: Fall Reading Days
Project pitch presentations
Guest lecture: TEEs and confidential LLM serving
Closed-book paper Quiz 1
Composition, privacy accounting, and private selection
Private learning: DP-SGD
PETs and symmetric-key cryptography: hashes and MACs
Public-key cryptography and Diffie-Hellman
No class: Election Day
RSA, digital signatures, and timing attacks
Secure multiparty computation: garbled circuits and oblivious transfer
MPC: secret sharing and security models
Guest lecture: oblivious RAM (ORAM)
Closed-book paper Quiz 2
Homomorphic encryption and private computation
No class: Thanksgiving recess
Guest lecture: privacy in industry
Privacy applications and review
Poster/demo session and course recap
No class: finals period