Wang, T.; Zhang, Y.; Jia, R. Improving Robustness to Model Inversion Attacks via Mutual Information Regularization. AAAI 2021, 35, 11666-11673.