{"total":269,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2110.05679","title":"Large Language Models Can Be Strong Differentially Private Learners","created":"2021-10-12","cited_by_count":412,"area":null},{"id":"2308.05374","title":"Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment","created":"2023-08-10","cited_by_count":401,"area":null},{"id":"2110.06500","title":"Differentially Private Fine-tuning of Language Models","created":"2021-10-13","cited_by_count":400,"area":null},{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2106.04378","title":"Adaptive Machine Unlearning","created":"2021-06-08","cited_by_count":176,"area":"safety"},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2210.09929","title":"Differentially Private Diffusion Models","created":"2022-10-18","cited_by_count":119,"area":"diffusion"},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2102.06062","title":"Deep Learning with Label Differential Privacy","created":"2021-02-11","cited_by_count":117,"area":null},{"id":"2309.11765","title":"Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generation","created":"2023-09-21","cited_by_count":96,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2305.15594","title":"Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models","created":"2023-05-24","cited_by_count":83,"area":null},{"id":"2102.02514","title":"FedAUX: Leveraging Unlabeled Auxiliary Data in Federated Learning","created":"2021-02-04","cited_by_count":69,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2205.03257","title":"Synthetic Data -- what, why and how?","created":"2022-05-06","cited_by_count":67,"area":null},{"id":"2108.12944","title":"Selective Differential Privacy for Language Modeling","created":"2021-08-30","cited_by_count":62,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2203.11481","title":"Mixed Differential Privacy in Computer Vision","created":"2022-03-22","cited_by_count":54,"area":null},{"id":"2104.08305","title":"Membership Inference Attack Susceptibility of Clinical Language Models","created":"2021-04-16","cited_by_count":52,"area":"safety"},{"id":"2106.03408","title":"Antipodes of Label Differential Privacy: PATE and ALIBI","created":"2021-06-07","cited_by_count":52,"area":null},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2112.00193","title":"Public Data-Assisted Mirror Descent for Private Model Training","created":"2021-12-01","cited_by_count":49,"area":null},{"id":"2109.11429","title":"Robin Hood and Matthew Effects: Differential Privacy Has Disparate Impact on Synthetic Data","created":"2021-09-23","cited_by_count":48,"area":null},{"id":"2202.08187","title":"Differential Privacy and Fairness in Decisions and Learning Tasks: A Survey","created":"2022-02-16","cited_by_count":47,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2107.01154","title":"Gradient-Leakage Resilient Federated Learning","created":"2021-07-02","cited_by_count":40,"area":null},{"id":"2102.08598","title":"Leveraging Public Data for Practical Private Query Release","created":"2021-02-17","cited_by_count":39,"area":null},{"id":"2412.04697","title":"Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy","created":"2024-12-06","cited_by_count":39,"area":"rag"},{"id":"2307.02106","title":"SoK: Privacy-Preserving Data Synthesis","created":"2023-07-05","cited_by_count":38,"area":null},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2211.04446","title":"Private Set Generation with Discriminative Information","created":"2022-11-07","cited_by_count":34,"area":null},{"id":"2102.05188","title":"CaPC Learning: Confidential and Private Collaborative Learning","created":"2021-02-09","cited_by_count":33,"area":null},{"id":"2202.07178","title":"Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacy","created":"2022-02-15","cited_by_count":33,"area":null},{"id":"2109.08907","title":"Releasing Graph Neural Networks with Differential Privacy Guarantees","created":"2021-09-18","cited_by_count":32,"area":null},{"id":"2204.07667","title":"Just Fine-tune Twice: Selective Differential Privacy for Large Language Models","created":"2022-04-15","cited_by_count":32,"area":null},{"id":"2208.07984","title":"Private Estimation with Public Data","created":"2022-08-16","cited_by_count":32,"area":null},{"id":"2211.05427","title":"On the Privacy Risks of Algorithmic Recourse","created":"2022-11-10","cited_by_count":32,"area":"safety"},{"id":"2103.11109","title":"DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation","created":"2021-03-20","cited_by_count":31,"area":null},{"id":"2201.00971","title":"Submix: Practical Private Prediction for Large-Scale Language Models","created":"2022-01-04","cited_by_count":31,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2104.05743","title":"Practical Defences Against Model Inversion Attacks for Split Neural Networks","created":"2021-04-12","cited_by_count":29,"area":null},{"id":"2406.02958","title":"PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs","created":"2024-06-05","cited_by_count":29,"area":null},{"id":"2504.16506","title":"A Comprehensive Survey of Synthetic Tabular Data Generation","created":"2025-04-23","cited_by_count":28,"area":"diffusion"},{"id":"2203.06580","title":"One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacy","created":"2022-03-13","cited_by_count":27,"area":"safety"},{"id":"2203.00324","title":"Differentially private training of residual networks with scale normalisation","created":"2022-03-01","cited_by_count":26,"area":null},{"id":"2203.02073","title":"Differentially Private Label Protection in Split Learning","created":"2022-03-04","cited_by_count":26,"area":null},{"id":"2404.06001","title":"Privacy Preserving Prompt Engineering: A Survey","created":"2024-04-09","cited_by_count":25,"area":null},{"id":"2407.12108","title":"Private prediction for large-scale synthetic text generation","created":"2024-07-16","cited_by_count":24,"area":null},{"id":"2111.08230","title":"Selective Ensembles for Consistent Predictions","created":"2021-11-16","cited_by_count":23,"area":null},{"id":"2305.13865","title":"Selective Pre-training for Private Fine-tuning","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2205.07890","title":"On the Difficulty of Defending Self-Supervised Learning against Model Extraction","created":"2022-05-16","cited_by_count":22,"area":null},{"id":"2403.15638","title":"Differentially Private Next-Token Prediction of Large Language Models","created":"2024-03-22","cited_by_count":22,"area":null},{"id":"2110.14019","title":"Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detection","created":"2021-10-26","cited_by_count":21,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2407.12858","title":"Grounding and Evaluation for Large Language Models: Practical Challenges and Lessons Learned (Survey)","created":"2024-07-10","cited_by_count":20,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2402.06806","title":"Systematic Assessment of Tabular Data Synthesis","created":"2024-02-09","cited_by_count":18,"area":"synth"},{"id":"2403.00932","title":"Differentially Private Knowledge Distillation via Synthetic Text Generation","created":"2024-03-01","cited_by_count":18,"area":"distill"},{"id":"2103.01294","title":"Wide Network Learning with Differential Privacy","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2303.12247","title":"Exploring the Benefits of Visual Prompting in Differential Privacy","created":"2023-03-22","cited_by_count":17,"area":null},{"id":"2406.01457","title":"Differentially Private Tabular Data Synthesis using Large Language Models","created":"2024-06-03","cited_by_count":16,"area":"synth"},{"id":"2107.09543","title":"Data synthesis and adversarial networks: A review and meta-analysis in cancer imaging","created":"2021-07-20","cited_by_count":15,"area":null},{"id":"2212.06074","title":"Regression with Label Differential Privacy","created":"2022-12-12","cited_by_count":15,"area":null},{"id":"2211.11591","title":"DPD-fVAE: Synthetic Data Generation Using Federated Variational Autoencoders With Differentially-Private Decoder","created":"2022-11-21","cited_by_count":14,"area":null},{"id":"2305.06473","title":"Securing Distributed SGD against Gradient Leakage Threats","created":"2023-05-10","cited_by_count":14,"area":null},{"id":"2308.06239","title":"Private Distribution Learning with Public Data: The View from Sample Compression","created":"2023-08-11","cited_by_count":14,"area":null},{"id":"2312.05114","title":"The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against \"Truly Anonymous\" Synthetic Datasets","created":"2023-12-08","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2106.15905","title":"Faithful Edge Federated Learning: Scalability and Privacy","created":"2021-06-30","cited_by_count":13,"area":null},{"id":"2206.01838","title":"Differentially Private Model Compression","created":"2022-06-03","cited_by_count":13,"area":null},{"id":"2208.03409","title":"DP$^2$-VAE: Differentially Private Pre-trained Variational Autoencoders","created":"2022-08-05","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2304.10819","title":"Auditing and Generating Synthetic Data with Controllable Trust Trade-offs","created":"2023-04-21","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2305.10994","title":"Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility","created":"2023-05-18","cited_by_count":13,"area":null},{"id":"2406.13985","title":"The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging","created":"2024-06-20","cited_by_count":13,"area":null},{"id":"2406.14318","title":"The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Prompts","created":"2024-06-20","cited_by_count":13,"area":null},{"id":"2111.02281","title":"Privately Publishable Per-instance Privacy","created":"2021-11-03","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2411.05818","title":"Open LLMs are Necessary for Current Private Adaptations and Outperform their Closed Alternatives","created":"2024-11-02","cited_by_count":12,"area":null},{"id":"2109.08630","title":"A Fairness Analysis on Private Aggregation of Teacher Ensembles","created":"2021-09-17","cited_by_count":11,"area":null},{"id":"2403.05681","title":"DP-TabICL: In-Context Learning with Differentially Private Tabular Data","created":"2024-03-08","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2104.01271","title":"PATE-AAE: Incorporating Adversarial Autoencoder into Private Aggregation of Teacher Ensembles for Spoken Command Classification","created":"2021-04-02","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2202.10517","title":"Individualized PATE: Differentially Private Machine Learning with Individual Privacy Guarantees","created":"2022-02-21","cited_by_count":10,"area":null},{"id":"2302.09183","title":"Learning with Impartiality to Walk on the Pareto Frontier of Fairness, Privacy, and Utility","created":"2023-02-17","cited_by_count":10,"area":null},{"id":"2303.01230","title":"Synthetic Data: Methods, Use Cases, and Risks","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2306.03962","title":"PILLAR: How to make semi-private learning more effective","created":"2023-06-06","cited_by_count":10,"area":null},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"}],"next_cursor":"100"}