
\appendix

\input{appendix/performance_tables}
\input{appendix/training-data_details.tex}
\input{appendix/attack_result_detail.tex}
\input{appendix/attack_arch}
\input{appendix/differential_privacy.tex}
\input{appendix/shadow_training}