{"total":346,"rows":[{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2106.02848","title":"Numerical Composition of Differential Privacy","created":"2021-06-05","cited_by_count":180,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2110.03620","title":"Hyperparameter Tuning with Renyi Differential Privacy","created":"2021-10-07","cited_by_count":104,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2106.08567","title":"Optimal Accounting of Differential Privacy via Characteristic Function","created":"2021-06-16","cited_by_count":86,"area":null},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2210.13918","title":"Differentially Private Language Models for Secure Data Sharing","created":"2022-10-25","cited_by_count":68,"area":null},{"id":"2305.18465","title":"Federated Learning of Gboard Language Models with Differential Privacy","created":"2023-05-29","cited_by_count":66,"area":null},{"id":"2106.07153","title":"Iterative Methods for Private Synthetic Data: Unifying Framework and New Methods","created":"2021-06-14","cited_by_count":59,"area":null},{"id":"2202.08312","title":"Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streams","created":"2022-02-16","cited_by_count":59,"area":null},{"id":"2312.03724","title":"DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineer","created":"2023-11-27","cited_by_count":57,"area":null},{"id":"2103.06641","title":"Differentially Private Query Release Through Adaptive Projection","created":"2021-03-11","cited_by_count":52,"area":null},{"id":"2207.04380","title":"Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributions","created":"2022-07-10","cited_by_count":52,"area":null},{"id":"2210.03403","title":"TAN Without a Burn: Scaling Laws of DP-SGD","created":"2022-10-07","cited_by_count":52,"area":null},{"id":"2305.01639","title":"Privacy-Preserving In-Context Learning for Large Language Models","created":"2023-05-02","cited_by_count":50,"area":null},{"id":"2306.08153","title":"(Amplified) Banded Matrix Factorization: A unified approach to private training","created":"2023-06-13","cited_by_count":49,"area":null},{"id":"2211.06530","title":"Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learning","created":"2022-11-12","cited_by_count":48,"area":null},{"id":"2106.01336","title":"Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Data","created":"2021-06-02","cited_by_count":47,"area":null},{"id":"2106.13329","title":"Covariance-Aware Private Mean Estimation Without Private Covariance Estimation","created":"2021-06-24","cited_by_count":46,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2101.09315","title":"Tighter expected generalization error bounds via Wasserstein distance","created":"2021-01-22","cited_by_count":43,"area":null},{"id":"2102.08598","title":"Leveraging Public Data for Practical Private Query Release","created":"2021-02-17","cited_by_count":39,"area":null},{"id":"2111.11320","title":"Private and polynomial time algorithms for learning Gaussians and beyond","created":"2021-11-22","cited_by_count":39,"area":null},{"id":"2203.03761","title":"The Fundamental Price of Secure Aggregation in Differentially Private Federated Learning","created":"2022-03-07","cited_by_count":39,"area":null},{"id":"2206.07902","title":"On Privacy and Personalization in Cross-Silo Federated Learning","created":"2022-06-16","cited_by_count":36,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2209.07400","title":"Private Synthetic Data for Multitask Learning and Marginal Queries","created":"2022-09-15","cited_by_count":35,"area":null},{"id":"2110.10132","title":"FriendlyCore: Practical Differentially Private Aggregation","created":"2021-10-19","cited_by_count":34,"area":null},{"id":"2111.04609","title":"A Private and Computationally-Efficient Estimator for Unbounded Gaussians","created":"2021-11-08","cited_by_count":34,"area":null},{"id":"2206.09888","title":"SoteriaFL: A Unified Framework for Private Federated Learning with Communication Compression","created":"2022-06-20","cited_by_count":34,"area":null},{"id":"2305.04063","title":"Exploring One-shot Semi-supervised Federated Learning with A Pre-trained Diffusion Model","created":"2023-05-06","cited_by_count":33,"area":"diffusion"},{"id":"2106.09779","title":"Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Losses","created":"2021-06-17","cited_by_count":30,"area":null},{"id":"2102.11158","title":"Federated $f$-Differential Privacy","created":"2021-02-22","cited_by_count":29,"area":null},{"id":"2208.04591","title":"Stronger Privacy Amplification by Shuffling for R\\'enyi and Approximate Differential Privacy","created":"2022-08-09","cited_by_count":29,"area":null},{"id":"2102.12099","title":"Lossless Compression of Efficient Private Local Randomizers","created":"2021-02-24","cited_by_count":27,"area":null},{"id":"2206.04621","title":"A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learning","created":"2022-06-09","cited_by_count":27,"area":null},{"id":"2203.06735","title":"Private Non-Convex Federated Learning Without a Trusted Server","created":"2022-03-13","cited_by_count":26,"area":null},{"id":"2211.00724","title":"Privacy Induces Robustness: Information-Computation Gaps and Sparse Mean Estimation","created":"2022-11-01","cited_by_count":25,"area":null},{"id":"2305.04701","title":"Differentially Private Attention Computation","created":"2023-05-08","cited_by_count":25,"area":null},{"id":"2103.01745","title":"IdentityDP: Differential Private Identification Protection for Face Images","created":"2021-03-02","cited_by_count":24,"area":null},{"id":"2407.12108","title":"Private prediction for large-scale synthetic text generation","created":"2024-07-16","cited_by_count":24,"area":null},{"id":"2102.08244","title":"Differentially Private Quantiles","created":"2021-02-16","cited_by_count":23,"area":null},{"id":"2211.10844","title":"Learning to Generate Image Embeddings with User-level Differential Privacy","created":"2022-11-20","cited_by_count":23,"area":null},{"id":"2310.06771","title":"Correlated Noise Provably Beats Independent Noise for Differentially Private Learning","created":"2023-10-10","cited_by_count":23,"area":null},{"id":"2201.07052","title":"Differentially Private Reinforcement Learning with Linear Function Approximation","created":"2022-01-18","cited_by_count":22,"area":null},{"id":"2203.05481","title":"Fully Adaptive Composition in Differential Privacy","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2304.01541","title":"Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimation","created":"2023-04-04","cited_by_count":22,"area":null},{"id":"2403.15638","title":"Differentially Private Next-Token Prediction of Large Language Models","created":"2024-03-22","cited_by_count":22,"area":null},{"id":"2206.00810","title":"Offline Reinforcement Learning with Differential Privacy","created":"2022-06-02","cited_by_count":20,"area":"offlinerl"},{"id":"2301.09112","title":"Differentially Private Natural Language Models: Recent Advances and Future Directions","created":"2023-01-22","cited_by_count":20,"area":null},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20,"area":null},{"id":"2412.09119","title":"The Utility and Complexity of in- and out-of-Distribution Machine Unlearning","created":"2024-12-12","cited_by_count":20,"area":"safety"},{"id":"2206.10713","title":"Beyond Uniform Lipschitz Condition in Differentially Private Optimization","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2306.03257","title":"Generating Private Synthetic Data with Genetic Algorithms","created":"2023-06-05","cited_by_count":18,"area":null},{"id":"2309.00886","title":"Tight Bounds for Machine Unlearning via Differential Privacy","created":"2023-09-02","cited_by_count":18,"area":"safety"},{"id":"2102.01258","title":"Local Differential Privacy Is Equivalent to Contraction of $E_\\gamma$-Divergence","created":"2021-02-02","cited_by_count":17,"area":null},{"id":"2104.02988","title":"Optimal Algorithms for Differentially Private Stochastic Monotone Variational Inequalities and Saddle-Point Problems","created":"2021-04-07","cited_by_count":17,"area":null},{"id":"2112.14445","title":"Differentially-Private Clustering of Easy Instances","created":"2021-12-29","cited_by_count":17,"area":null},{"id":"2404.04360","title":"Prompt Public Large Language Models to Synthesize Data for Private On-device Applications","created":"2024-04-05","cited_by_count":17,"area":null},{"id":"2105.05180","title":"On the Renyi Differential Privacy of the Shuffle Model","created":"2021-05-11","cited_by_count":16,"area":null},{"id":"2105.08233","title":"Oneshot Differentially Private Top-k Selection","created":"2021-05-18","cited_by_count":16,"area":null},{"id":"2106.00001","title":"Privately Learning Subspaces","created":"2021-05-28","cited_by_count":16,"area":null},{"id":"2212.04680","title":"Near-Optimal Differentially Private Reinforcement Learning","created":"2022-12-09","cited_by_count":16,"area":null},{"id":"2205.14324","title":"Differentially Private Covariance Revisited","created":"2022-05-28","cited_by_count":15,"area":null},{"id":"2207.04381","title":"Faster Privacy Accounting via Evolving Discretization","created":"2022-07-10","cited_by_count":15,"area":null},{"id":"2410.08892","title":"Federated Learning in Practice: Reflections and Projections","created":"2024-10-11","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2206.04236","title":"Edgeworth Accountant: An Analytical Approach to Differential Privacy Composition","created":"2022-06-09","cited_by_count":14,"area":null},{"id":"2206.05772","title":"Distributed Differential Privacy in Multi-Armed Bandits","created":"2022-06-12","cited_by_count":14,"area":null},{"id":"2302.13945","title":"On Differentially Private Federated Linear Contextual Bandits","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2308.06239","title":"Private Distribution Learning with Public Data: The View from Sample Compression","created":"2023-08-11","cited_by_count":14,"area":null},{"id":"2106.15905","title":"Faithful Edge Federated Learning: Scalability and Privacy","created":"2021-06-30","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2305.13209","title":"Faster Differentially Private Convex Optimization via Second-Order Methods","created":"2023-05-22","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2403.00278","title":"Shifted Interpolation for Differential Privacy","created":"2024-03-01","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2110.05429","title":"Differentially Private Approximate Quantiles","created":"2021-10-11","cited_by_count":12,"area":null},{"id":"2301.13334","title":"A Bias-Accuracy-Privacy Trilemma for Statistical Estimation","created":"2023-01-30","cited_by_count":12,"area":null},{"id":"2302.09699","title":"Private (Stochastic) Non-Convex Optimization Revisited: Second-Order Stationary Points and Excess Risks","created":"2023-02-20","cited_by_count":12,"area":null},{"id":"2306.09666","title":"A Smooth Binary Mechanism for Efficient Private Continual Observation","created":"2023-06-16","cited_by_count":12,"area":null},{"id":"2307.06422","title":"Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection","created":"2023-07-12","cited_by_count":12,"area":null},{"id":"2311.03797","title":"User-level Differentially Private Stochastic Convex Optimization: Efficient Algorithms with Optimal Rates","created":"2023-11-07","cited_by_count":12,"area":null},{"id":"2402.13531","title":"Private Gradient Descent for Linear Regression: Tighter Error Bounds and Instance-Specific Uncertainty Estimation","created":"2024-02-21","cited_by_count":12,"area":null},{"id":"2405.09839","title":"Advances in Robust Federated Learning: A Survey with Heterogeneity Considerations","created":"2024-05-16","cited_by_count":12,"area":null},{"id":"2102.12467","title":"No-Regret Algorithms for Private Gaussian Process Bandit Optimization","created":"2021-02-24","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2103.14068","title":"Differentially Private Normalizing Flows for Privacy-Preserving Density Estimation","created":"2021-03-25","cited_by_count":10,"area":null},{"id":"2110.11688","title":"Differentially Private Coordinate Descent for Composite Empirical Risk Minimization","created":"2021-10-22","cited_by_count":10,"area":null},{"id":"2202.11199","title":"Differentially Private Regression with Unbounded Covariates","created":"2022-02-19","cited_by_count":10,"area":null},{"id":"2210.06140","title":"Differentially Private Bootstrap: New Privacy Analysis and Inference Strategies","created":"2022-10-12","cited_by_count":10,"area":null},{"id":"2301.03566","title":"Simple Binary Hypothesis Testing under Local Differential Privacy and Communication Constraints","created":"2023-01-09","cited_by_count":10,"area":null}],"next_cursor":"100"}