Auditing Differentially Private Machine Learning: How Private is Private SGD? - Jagielski, Matthew; Ullman, Jonathan; Oprea, Alina (Advances in Neural Information Processing Systems, 2020)