{"total":251,"rows":[{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2106.02848","title":"Numerical Composition of Differential Privacy","created":"2021-06-05","cited_by_count":180,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2206.00240","title":"Privacy for Free: How does Dataset Condensation Help Privacy?","created":"2022-06-01","cited_by_count":120,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2106.08567","title":"Optimal Accounting of Differential Privacy via Characteristic Function","created":"2021-06-16","cited_by_count":86,"area":null},{"id":"2111.09278","title":"Differentially Private Federated Learning on Heterogeneous Data","created":"2021-11-17","cited_by_count":74,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2210.13918","title":"Differentially Private Language Models for Secure Data Sharing","created":"2022-10-25","cited_by_count":68,"area":null},{"id":"2102.09159","title":"Robust and Differentially Private Mean Estimation","created":"2021-02-18","cited_by_count":66,"area":null},{"id":"2207.09653","title":"FedDM: Iterative Distribution Matching for Communication-Efficient Federated Learning","created":"2022-07-20","cited_by_count":66,"area":null},{"id":"2211.06550","title":"TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Data","created":"2022-11-12","cited_by_count":57,"area":null},{"id":"2207.04380","title":"Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributions","created":"2022-07-10","cited_by_count":52,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2202.12219","title":"Debugging Differential Privacy: A Case Study for Privacy Auditing","created":"2022-02-24","cited_by_count":40,"area":null},{"id":"2102.04737","title":"Federated Learning with Local Differential Privacy: Trade-offs between Privacy, Utility, and Communication","created":"2021-02-09","cited_by_count":39,"area":null},{"id":"2210.15042","title":"Privately Fine-Tuning Large Language Models with Differential Privacy","created":"2022-10-26","cited_by_count":39,"area":null},{"id":"2302.09483","title":"Why Is Public Pretraining Necessary for Private Model Training?","created":"2023-02-19","cited_by_count":37,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2105.07513","title":"Decision Making with Differential Privacy under a Fairness Lens","created":"2021-05-16","cited_by_count":32,"area":null},{"id":"2202.10717","title":"Quantum Differential Privacy: An Information Theory Perspective","created":"2022-02-22","cited_by_count":32,"area":null},{"id":"2106.09779","title":"Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Losses","created":"2021-06-17","cited_by_count":30,"area":null},{"id":"2102.11158","title":"Federated $f$-Differential Privacy","created":"2021-02-22","cited_by_count":29,"area":null},{"id":"2306.05131","title":"Conformal Prediction for Federated Uncertainty Quantification Under Label Shift","created":"2023-06-08","cited_by_count":29,"area":null},{"id":"2209.15259","title":"On the Impossible Safety of Large AI Models","created":"2022-09-30","cited_by_count":28,"area":null},{"id":"2203.06735","title":"Private Non-Convex Federated Learning Without a Trusted Server","created":"2022-03-13","cited_by_count":26,"area":null},{"id":"2310.09639","title":"DPZero: Private Fine-Tuning of Language Models without Backpropagation","created":"2023-10-14","cited_by_count":26,"area":null},{"id":"2111.04906","title":"The Role of Adaptive Optimizers for Honest Private Hyperparameter Selection","created":"2021-11-09","cited_by_count":25,"area":null},{"id":"2210.08643","title":"A General Framework for Auditing Differentially Private Machine Learning","created":"2022-10-16","cited_by_count":25,"area":null},{"id":"2106.09680","title":"Accuracy, Interpretability, and Differential Privacy via Explainable Boosting","created":"2021-06-17","cited_by_count":24,"area":null},{"id":"2205.13709","title":"DP-PCA: Statistically Optimal and Differentially Private PCA","created":"2022-05-27","cited_by_count":24,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2102.08244","title":"Differentially Private Quantiles","created":"2021-02-16","cited_by_count":23,"area":null},{"id":"2211.10844","title":"Learning to Generate Image Embeddings with User-level Differential Privacy","created":"2022-11-20","cited_by_count":23,"area":null},{"id":"2103.01953","title":"Privacy Amplification for Federated Learning via User Sampling and Wireless Aggregation","created":"2021-03-02","cited_by_count":22,"area":null},{"id":"2203.05481","title":"Fully Adaptive Composition in Differential Privacy","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2206.00363","title":"Bring Your Own Algorithm for Optimal Differentially Private Stochastic Minimax Optimization","created":"2022-06-01","cited_by_count":22,"area":null},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22,"area":null},{"id":"2301.09112","title":"Differentially Private Natural Language Models: Recent Advances and Future Directions","created":"2023-01-22","cited_by_count":20,"area":null},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2211.06387","title":"\\~Optimal Differentially Private Learning of Thresholds and Quasi-Concave Optimization","created":"2022-11-11","cited_by_count":18,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2103.01294","title":"Wide Network Learning with Differential Privacy","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2105.05180","title":"On the Renyi Differential Privacy of the Shuffle Model","created":"2021-05-11","cited_by_count":16,"area":null},{"id":"2105.08233","title":"Oneshot Differentially Private Top-k Selection","created":"2021-05-18","cited_by_count":16,"area":null},{"id":"2202.11823","title":"Differentially Private Speaker Anonymization","created":"2022-02-23","cited_by_count":16,"area":null},{"id":"2207.04381","title":"Faster Privacy Accounting via Evolving Discretization","created":"2022-07-10","cited_by_count":15,"area":null},{"id":"2502.08202","title":"Privacy amplification by random allocation","created":"2025-02-12","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2206.04236","title":"Edgeworth Accountant: An Analytical Approach to Differential Privacy Composition","created":"2022-06-09","cited_by_count":14,"area":null},{"id":"2401.04336","title":"Deep Efficient Private Neighbor Generation for Subgraph Federated Learning","created":"2024-01-09","cited_by_count":14,"area":null},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2109.13012","title":"Federated Deep Learning with Bayesian Privacy","created":"2021-09-27","cited_by_count":13,"area":null},{"id":"2205.00107","title":"Bridging Differential Privacy and Byzantine-Robustness via Model Aggregation","created":"2022-04-29","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2305.10994","title":"Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility","created":"2023-05-18","cited_by_count":13,"area":null},{"id":"2310.19253","title":"Flow-based Distributionally Robust Optimization","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2403.00278","title":"Shifted Interpolation for Differential Privacy","created":"2024-03-01","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2212.10520","title":"Privacy-Preserving Domain Adaptation of Semantic Parsers","created":"2022-12-20","cited_by_count":12,"area":null},{"id":"2302.01190","title":"On the Efficacy of Differentially Private Few-shot Image Classification","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2302.09699","title":"Private (Stochastic) Non-Convex Optimization Revisited: Second-Order Stationary Points and Excess Risks","created":"2023-02-20","cited_by_count":12,"area":null},{"id":"2307.06422","title":"Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection","created":"2023-07-12","cited_by_count":12,"area":null},{"id":"2112.01585","title":"Differentially Private Exploration in Reinforcement Learning with Linear Representation","created":"2021-12-02","cited_by_count":11,"area":null},{"id":"2202.12968","title":"Does Label Differential Privacy Prevent Label Inference Attacks?","created":"2022-02-25","cited_by_count":11,"area":null},{"id":"2204.03230","title":"What You See is What You Get: Principled Deep Learning via Distributional Generalization","created":"2022-04-07","cited_by_count":11,"area":null},{"id":"2304.07927","title":"A Randomized Approach for Tight Privacy Accounting","created":"2023-04-17","cited_by_count":11,"area":null},{"id":"2210.04442","title":"DPAR: Decoupled Graph Neural Networks with Node-Level Differential Privacy","created":"2022-10-10","cited_by_count":10,"area":null},{"id":"2407.06496","title":"It's Our Loss: No Privacy Amplification for Hidden State DP-SGD With Non-Convex Loss","created":"2024-07-09","cited_by_count":10,"area":null},{"id":"2203.16100","title":"Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATE","created":"2022-03-30","cited_by_count":9,"area":null},{"id":"2205.14485","title":"Noise-Aware Statistical Inference with Differentially Private Synthetic Data","created":"2022-05-28","cited_by_count":9,"area":null},{"id":"2210.02910","title":"Federated Boosted Decision Trees with Differential Privacy","created":"2022-10-06","cited_by_count":9,"area":null},{"id":"2301.13273","title":"Near Optimal Private and Robust Linear Regression","created":"2023-01-30","cited_by_count":9,"area":null},{"id":"2305.15538","title":"Post-processing Private Synthetic Data for Improving Utility on Selected Measures","created":"2023-05-24","cited_by_count":9,"area":null},{"id":"2506.06108","title":"Synthetic Tabular Data: Methods, Attacks and Defenses","created":"2025-06-06","cited_by_count":9,"area":null},{"id":"2407.02191","title":"Attack-Aware Noise Calibration for Differential Privacy","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2409.09558","title":"A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theorem","created":"2024-09-14","cited_by_count":8,"area":null},{"id":"2410.01068","title":"Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothness","created":"2024-10-01","cited_by_count":8,"area":null},{"id":"2103.08721","title":"A Central Limit Theorem for Differentially Private Query Answering","created":"2021-03-15","cited_by_count":7,"area":null},{"id":"2208.04845","title":"Quantization enabled Privacy Protection in Decentralized Stochastic Optimization","created":"2022-08-07","cited_by_count":7,"area":null},{"id":"2307.15424","title":"Deep Generative Models, Synthetic Tabular Data, and Differential Privacy: An Overview and Synthesis","created":"2023-07-28","cited_by_count":7,"area":null},{"id":"2107.08763","title":"Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learning","created":"2021-07-19","cited_by_count":6,"area":null},{"id":"2111.05791","title":"Distribution-Invariant Differential Privacy","created":"2021-11-08","cited_by_count":6,"area":null},{"id":"2203.03604","title":"Differential Privacy Amplification in Quantum and Quantum-inspired Algorithms","created":"2022-03-07","cited_by_count":6,"area":null},{"id":"2204.03919","title":"Network Shuffling: Privacy Amplification via Random Walks","created":"2022-04-08","cited_by_count":6,"area":null},{"id":"2210.02215","title":"On the Statistical Complexity of Estimation and Testing under Privacy Constraints","created":"2022-10-05","cited_by_count":6,"area":null},{"id":"2211.01852","title":"Revisiting Hyperparameter Tuning with Differential Privacy","created":"2022-11-03","cited_by_count":6,"area":null},{"id":"2306.00133","title":"A Note On Interpreting Canary Exposure","created":"2023-05-31","cited_by_count":6,"area":null},{"id":"2307.12542","title":"Client-Level Differential Privacy via Adaptive Intermediary in Federated Medical Imaging","created":"2023-07-24","cited_by_count":6,"area":null},{"id":"2311.10101","title":"Gaussian Differential Privacy on Riemannian Manifolds","created":"2023-11-09","cited_by_count":6,"area":null},{"id":"2406.04827","title":"Auditing Differential Privacy Guarantees Using Density Estimation","created":"2024-06-07","cited_by_count":6,"area":null},{"id":"2407.05237","title":"Privacy of the last iterate in cyclically-sampled DP-SGD on nonconvex composite losses","created":"2024-07-07","cited_by_count":6,"area":null},{"id":"2411.00775","title":"Dimension-free Private Mean Estimation for Anisotropic Distributions","created":"2024-11-01","cited_by_count":6,"area":null}],"next_cursor":"100"}