SoK: Reconstruction Attacks on Synthetic Tabular Data (Insights from Winning the NIST CRC)
The choice of SDG method governs risk far more than the choice of attack; differential privacy reduces reconstruction steadily up to epsilon approximately 10, above which reconstruction risk levels off for all six DP mechanisms; de-identification methods are the most exposed, with diffusion the only synthesizer close b...