Understanding and Measuring Privacy Risks in Machine Learning