Optimal privacy guarantees for a relaxed threat model: Addressing sub-optimal adversaries in differentially private machine learning - Kaissis, Georgios; Ziller, Alexander; Kolek, Stefan; Riess, Anneliese; Rueckert, Daniel (Advances in Neural Information Processing Systems, 2023)