\begin{table}[htb] \caption{Summary of dataset splits: $\traindata$ to train $\targetmodel$, $\testdata$ to evaluate $\targetmodel$, $\auxtraindata$ to train $\attackmodel$, and $\auxtestdata$ to evaluate $\attackmodel$.} \footnotesize \begin{center} \begin{tabular}{ l | c | c | c | c} \hline \textbf{Dataset} & $\traindata$ & $\testdata$ & $\auxtraindata$ & $\auxtestdata$\\ \hline \textbf{\census} & 24,752 & 6,188 & 4,950 & 1,238 \\ \textbf{\compas} & 4,937 & 1,235 & 988 & 247\\ \textbf{\meps} & 12,664 & 3,166 & 2,532 & 634\\ \textbf{\lfw} & 10514 & 2629 & 2103 & 526\\ \hline \end{tabular} \end{center} \label{tab:summary} \end{table}