M. Hernández, E. Zuazua (2023)Approximate and Weighted Data Reconstruction Attack in Federated Learning arXiv:2409.06555
Abstract. We demonstrate that a ReLU deep neural network with a width of 2 and a depth of 2N+4M−1 layers can achieve finite sample memorization for any dataset comprising N elements in ℝd, where d≥1, and M classes, thereby ensuring accurate classification. By modeling the neural network as a time-discrete nonlinear dynamical system, we interpret the memorization property as a problem of simultaneous or ensemble controllability. This problem is addressed by constructing the network parameters inductively and explicitly, bypassing the need for training or solving any optimization problem. Additionally, we establish that such a network can achieve universal approximation in Lp(Ω;ℝ+), where Ω is a bounded subset of ℝd and p∈[1,∞), using a ReLU deep neural network with a width of d+1. We also provide depth estimates for approximating W1,p functions and width estimates for approximating Lp(Ω;ℝm) for m≥1. Our proofs are constructive, offering explicit values for the biases and weights involved.
arxiv: 2409.06555