Towards Attack to MemGuard with Nonlocal-Means Method

Table 1

The details of the datasets splitting.

Datasets	Location	Texas100	CH-MNIST
	0–999	0–9,999	0–999
	1,000–1,999	10,000–19,999	1,000–1,999
	2,000–2,999	20,000–29,999	2,000–2,999
	3,000–3,499	30,000–39,999	3,000–3,499
	4,000–4,499	40,000–49,999	4,000–4,499