Purifier: Defending Data Inference Attacks via Transforming Confidence Scores