Differentially-Private Decision Trees and Provable Robustness to Data Poisoning
By leveraging the better privacy-utility trade-off of PrivaTree, this work is able to train decision trees with significantly better robustness against backdoor attacks compared to regular decision trees and with meaningful theoretical guarantees.