[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-batch-normalization-boosts-memorization-and-privacy-risk":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},6975,"batch-normalization-boosts-memorization-and-privacy-risk","Batch Normalization Boosts Memorization and Privacy Risk","New research finds batch normalization makes networks memorize outliers more, raising privacy risks from membership inference attacks.","Batch normalization, the trick that lets neural networks train faster and more stably, turns out to make models worse at keeping secrets.\n\nA new study on arXiv tested how batch normalization, or BN, affects memorization and privacy leakage. Researchers ran three separate tests: how much models memorize atypical or out-of-distribution samples, how much influence individual training examples have on the model, and how vulnerable models are to membership inference attacks, which let an attacker guess whether a specific record was used in training. Across multiple datasets and architectures, adding BN consistently increased memorization of outlier samples and made models significantly easier to attack. A deeper look at BN's math showed why: during training, BN amplifies the per-step margin growth of outlier samples, effectively giving rare examples an outsized influence on the model.\n\nBN is not some obscure layer. It sits inside a huge share of production computer vision and other deep learning models already deployed today, which means this isn't a hypothetical risk confined to a lab. The findings add a concrete, mechanistic explanation to the broader and growing worry that models trained on sensitive data can be coaxed into revealing it, a concern that has mostly centered on large language models until now.\n\nNobody is going to rip batch normalization out of production models this week. But this is a good example of how a technique adopted purely for training speed can quietly become a privacy liability nobody signed up for.","[\"ai\",\"privacy\",\"machine-learning\",\"research\"]","2026-09-18T04:00:00.000Z","2026-09-19T01:21:16.383Z","2026-09-19T01:21:28.293Z","published",null,[],"ai",[24,26,27,28],"privacy","machine-learning","research",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2605.24420",0,{"sections":35},[36,39,43,48,53,57,61,66,70,75,80,85,90,95],{"name":37,"slug":24,"count":38,"latest_published_at":18},"AI",4082,{"name":40,"slug":41,"count":42,"latest_published_at":18},"Security","security",661,{"name":44,"slug":45,"count":46,"latest_published_at":47},"Policy","policy",339,"2026-09-17T12:00:00.000Z",{"name":49,"slug":50,"count":51,"latest_published_at":52},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":54,"slug":55,"count":56,"latest_published_at":18},"Hardware","hardware",155,{"name":58,"slug":59,"count":60,"latest_published_at":18},"Science","science",125,{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",99,"2026-09-09T17:27:33.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":18},"Dev Tools","dev-tools",78,{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",75,"2026-09-10T20:41:21.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Startups","startups",55,"2026-09-09T23:14:29.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Gaming","gaming",43,"2026-09-10T12:18:06.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"General","general",41,"2026-09-08T01:57:23.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]