{"total":107,"rows":[{"id":"2110.05679","title":"Large Language Models Can Be Strong Differentially Private Learners","created":"2021-10-12","cited_by_count":412,"area":null},{"id":"2109.12298","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","created":"2021-09-25","cited_by_count":383,"area":null},{"id":"2107.06917","title":"A Field Guide to Federated Optimization","created":"2021-07-14","cited_by_count":315,"area":null},{"id":"2102.13179","title":"Machine Unlearning via Algorithmic Stability","created":"2021-02-25","cited_by_count":130,"area":"safety"},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2110.03620","title":"Hyperparameter Tuning with Renyi Differential Privacy","created":"2021-10-07","cited_by_count":104,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2106.08567","title":"Optimal Accounting of Differential Privacy via Characteristic Function","created":"2021-06-16","cited_by_count":86,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2203.11481","title":"Mixed Differential Privacy in Computer Vision","created":"2022-03-22","cited_by_count":54,"area":null},{"id":"2103.01278","title":"Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Time","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2111.12981","title":"Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanism","created":"2021-11-25","cited_by_count":50,"area":null},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2211.06530","title":"Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learning","created":"2022-11-12","cited_by_count":48,"area":null},{"id":"2106.01336","title":"Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Data","created":"2021-06-02","cited_by_count":47,"area":null},{"id":"2106.13756","title":"Private Adaptive Gradient Methods for Convex Optimization","created":"2021-06-25","cited_by_count":46,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2102.03013","title":"Fast and Memory Efficient Differentially Private-SGD via JL Projections","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2212.03714","title":"Reconstructing Training Data from Model Gradient, Provably","created":"2022-12-07","cited_by_count":27,"area":null},{"id":"2203.06735","title":"Private Non-Convex Federated Learning Without a Trusted Server","created":"2022-03-13","cited_by_count":26,"area":null},{"id":"2111.04906","title":"The Role of Adaptive Optimizers for Honest Private Hyperparameter Selection","created":"2021-11-09","cited_by_count":25,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2302.04787","title":"On the Privacy-Robustness-Utility Trilemma in Distributed Learning","created":"2023-02-09","cited_by_count":24,"area":null},{"id":"2201.09046","title":"Differentially Private SGDA for Minimax Problems","created":"2022-01-22","cited_by_count":23,"area":null},{"id":"2305.13865","title":"Selective Pre-training for Private Fine-tuning","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2310.06771","title":"Correlated Noise Provably Beats Independent Noise for Differentially Private Learning","created":"2023-10-10","cited_by_count":23,"area":null},{"id":"2110.06255","title":"Not all noise is accounted equally: How differentially private learning benefits from large sampling rates","created":"2021-10-12","cited_by_count":21,"area":null},{"id":"2303.07152","title":"Score Attack: A Lower Bound Technique for Optimal Differentially Private Learning","created":"2023-03-13","cited_by_count":21,"area":null},{"id":"2108.02391","title":"Adapting to Function Difficulty and Growth Conditions in Private Optimization","created":"2021-08-05","cited_by_count":20,"area":null},{"id":"2208.02304","title":"How Much Privacy Does Federated Learning with Secure Aggregation Guarantee?","created":"2022-08-03","cited_by_count":19,"area":null},{"id":"2102.08166","title":"Differential Privacy and Byzantine Resilience in SGD: Do They Add Up?","created":"2021-02-16","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2103.01294","title":"Wide Network Learning with Differential Privacy","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2104.02988","title":"Optimal Algorithms for Differentially Private Stochastic Monotone Variational Inequalities and Saddle-Point Problems","created":"2021-04-07","cited_by_count":17,"area":null},{"id":"2106.09805","title":"Shuffle Private Stochastic Convex Optimization","created":"2021-06-17","cited_by_count":17,"area":null},{"id":"2105.05180","title":"On the Renyi Differential Privacy of the Shuffle Model","created":"2021-05-11","cited_by_count":16,"area":null},{"id":"2207.08988","title":"Training Large-Vocabulary Neural Language Models by Private Federated Learning for Resource-Constrained Devices","created":"2022-07-18","cited_by_count":16,"area":null},{"id":"2308.10888","title":"Unlocking Accuracy and Fairness in Differentially Private Image Classification","created":"2023-08-21","cited_by_count":16,"area":null},{"id":"2503.12347","title":"Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMs","created":"2025-03-16","cited_by_count":16,"area":null},{"id":"2202.12232","title":"Bounding Membership Inference","created":"2022-02-24","cited_by_count":15,"area":"safety"},{"id":"2303.04274","title":"Amplitude-Varying Perturbation for Balancing Privacy and Utility in Federated Learning","created":"2023-03-07","cited_by_count":14,"area":null},{"id":"2207.08347","title":"Private Convex Optimization in General Norms","created":"2022-07-18","cited_by_count":13,"area":null},{"id":"2108.00331","title":"Faster Rates of Private Stochastic Convex Optimization","created":"2021-07-31","cited_by_count":12,"area":null},{"id":"2107.09802","title":"Private Alternating Least Squares: Practical Private Matrix Completion with Tighter Rates","created":"2021-07-20","cited_by_count":10,"area":null},{"id":"2111.13895","title":"Towards Understanding the Impact of Model Size on Differential Private Classification","created":"2021-11-27","cited_by_count":10,"area":null},{"id":"2202.11199","title":"Differentially Private Regression with Unbounded Covariates","created":"2022-02-19","cited_by_count":10,"area":null},{"id":"2210.04442","title":"DPAR: Decoupled Graph Neural Networks with Node-Level Differential Privacy","created":"2022-10-10","cited_by_count":10,"area":null},{"id":"2302.03884","title":"DIFF2: Differential Private Optimization via Gradient Differences for Nonconvex Distributed Learning","created":"2023-02-08","cited_by_count":10,"area":null},{"id":"2310.20579","title":"Initialization Matters: Privacy-Utility Analysis of Overparameterized Neural Networks","created":"2023-10-31","cited_by_count":10,"area":null},{"id":"2106.13208","title":"Handling Data Heterogeneity with Generative Replay in Collaborative Learning for Medical Imaging","created":"2021-06-24","cited_by_count":9,"area":null},{"id":"2206.01836","title":"Dimension Independent Generalization of DP-SGD for Overparameterized Smooth Convex Optimization","created":"2022-06-03","cited_by_count":9,"area":null},{"id":"2104.07815","title":"A Method to Reveal Speaker Identity in Distributed ASR Training, and How to Counter It","created":"2021-04-15","cited_by_count":8,"area":null},{"id":"2111.04089","title":"Sampling from Log-Concave Distributions with Infinity-Distance Guarantees","created":"2021-11-07","cited_by_count":8,"area":null},{"id":"2112.00845","title":"Improving Differentially Private SGD via Randomly Sparsified Gradients","created":"2021-12-01","cited_by_count":8,"area":null},{"id":"2201.03064","title":"Stability Based Generalization Bounds for Exponential Family Langevin Dynamics","created":"2022-01-09","cited_by_count":8,"area":null},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2204.08345","title":"Extracting Targeted Training Data from ASR Models, and How to Mitigate It","created":"2022-04-18","cited_by_count":7,"area":null},{"id":"2207.09087","title":"Is Vertical Logistic Regression Privacy-Preserving? A Comprehensive Privacy Analysis and Beyond","created":"2022-07-19","cited_by_count":7,"area":null},{"id":"2107.08763","title":"Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learning","created":"2021-07-19","cited_by_count":6,"area":null},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2201.02265","title":"Learning to be adversarially robust and differentially private","created":"2022-01-06","cited_by_count":6,"area":null},{"id":"2207.04686","title":"(Nearly) Optimal Private Linear Regression via Adaptive Clipping","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2503.10945","title":"Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning","created":"2025-03-13","cited_by_count":6,"area":null},{"id":"2110.07435","title":"Adaptive Differentially Private Empirical Risk Minimization","created":"2021-10-14","cited_by_count":5,"area":null},{"id":"2301.00738","title":"Training Differentially Private Graph Neural Networks with Random Walk Sampling","created":"2023-01-02","cited_by_count":5,"area":null},{"id":"2302.12559","title":"From Noisy Fixed-Point Iterations to Private ADMM for Centralized and Federated Learning","created":"2023-02-24","cited_by_count":5,"area":null},{"id":"2110.03991","title":"Combining Differential Privacy and Byzantine Resilience in Distributed SGD","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2206.03617","title":"Subject Granular Differential Privacy in Federated Learning","created":"2022-06-07","cited_by_count":4,"area":null},{"id":"2207.01560","title":"High-Dimensional Private Empirical Risk Minimization by Greedy Coordinate Descent","created":"2022-07-04","cited_by_count":4,"area":null},{"id":"2208.12392","title":"DiVa: An Accelerator for Differentially Private Machine Learning","created":"2022-08-26","cited_by_count":4,"area":null},{"id":"2210.03843","title":"Differentially Private Deep Learning with ModelMix","created":"2022-10-07","cited_by_count":4,"area":null},{"id":"2211.11434","title":"Privacy in Practice: Private COVID-19 Detection in X-Ray Images (Extended Version)","created":"2022-11-21","cited_by_count":4,"area":null},{"id":"2505.05707","title":"Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacy","created":"2025-05-09","cited_by_count":4,"area":null},{"id":"2111.12786","title":"Differentially Private Nonparametric Regression Under a Growth Condition","created":"2021-11-24","cited_by_count":3,"area":null},{"id":"2210.17070","title":"Private optimization in the interpolation regime: faster rates and hardness results","created":"2022-10-31","cited_by_count":3,"area":null},{"id":"2303.14084","title":"Differentially Private Synthetic Control","created":"2023-03-24","cited_by_count":3,"area":null},{"id":"2305.15894","title":"Private Meeting Summarization Without Performance Loss","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2104.00245","title":"High-Dimensional Differentially-Private EM Algorithm: Methods and Near-Optimal Statistical Guarantees","created":"2021-04-01","cited_by_count":2,"area":null},{"id":"2209.02022","title":"How Much User Context Do We Need? Privacy by Design in Mental Health NLP Application","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2209.11595","title":"Differentially private partitioned variational inference","created":"2022-09-23","cited_by_count":2,"area":null},{"id":"2103.00075","title":"Noisy Truncated SGD: Optimization and Generalization","created":"2021-02-26","cited_by_count":1,"area":null},{"id":"2110.13760","title":"DPCOVID: Privacy-Preserving Federated Covid-19 Detection","created":"2021-10-26","cited_by_count":1,"area":null},{"id":"2202.07194","title":"One-bit Submission for Locally Private Quasi-MLE: Its Asymptotic Normality and Limitation","created":"2022-02-15","cited_by_count":1,"area":null},{"id":"2205.12718","title":"DPSNN: A Differentially Private Spiking Neural Network with Temporal Enhanced Pooling","created":"2022-05-24","cited_by_count":1,"area":null},{"id":"2206.08111","title":"On Private Online Convex Optimization: Optimal Algorithms in $\\ell_p$-Geometry and High Dimensional Contextual Bandits","created":"2022-06-16","cited_by_count":1,"area":null},{"id":"2211.01141","title":"User-Entity Differential Privacy in Learning Natural Language Models","created":"2022-11-01","cited_by_count":1,"area":null},{"id":"2212.01688","title":"LDL: A Defense for Label-Based Membership Inference Attacks","created":"2022-12-03","cited_by_count":1,"area":"safety"},{"id":"2301.13778","title":"Differentially Private Distributed Bayesian Linear Regression with MCMC","created":"2023-01-31","cited_by_count":1,"area":null},{"id":"2305.15723","title":"Learning across Data Owners with Joint Differential Privacy","created":"2023-05-25","cited_by_count":1,"area":null},{"id":"2506.02563","title":"Privacy-Preserving Federated Convex Optimization: Balancing Partial-Participation and Efficiency via Noise Cancellation","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2603.19703","title":"Minimax and Adaptive Covariance Matrix Estimation under Differential Privacy","created":"2026-03-20","cited_by_count":1,"area":null},{"id":"2110.00539","title":"Applying Differential Privacy to Tensor Completion","created":"2021-10-01","cited_by_count":0,"area":null},{"id":"2110.00719","title":"One-Bit Matrix Completion with Differential Privacy","created":"2021-10-02","cited_by_count":0,"area":null},{"id":"2206.07998","title":"Differentially Private Multi-Party Data Release for Linear Regression","created":"2022-06-16","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2406.07712","title":"Loss Gradient Gaussian Width based Generalization and Optimization Guarantees","created":"2024-06-11","cited_by_count":0,"area":null}],"next_cursor":"100"}