{"total":236,"rows":[{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2106.08567","title":"Optimal Accounting of Differential Privacy via Characteristic Function","created":"2021-06-16","cited_by_count":86,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2111.09278","title":"Differentially Private Federated Learning on Heterogeneous Data","created":"2021-11-17","cited_by_count":74,"area":null},{"id":"2102.05855","title":"Differential Privacy Dynamics of Langevin Diffusion and Noisy Gradient Descent","created":"2021-02-11","cited_by_count":73,"area":null},{"id":"2204.00401","title":"CTAB-GAN+: Enhancing Tabular Data Synthesis","created":"2022-04-01","cited_by_count":70,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2111.01177","title":"Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergence","created":"2021-11-01","cited_by_count":54,"area":null},{"id":"2210.03403","title":"TAN Without a Burn: Scaling Laws of DP-SGD","created":"2022-10-07","cited_by_count":52,"area":null},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2211.06530","title":"Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learning","created":"2022-11-12","cited_by_count":48,"area":null},{"id":"2105.08318","title":"Zero-Shot Recommender Systems","created":"2021-05-18","cited_by_count":46,"area":null},{"id":"2201.12383","title":"Bounding Training Data Reconstruction in Private (Deep) Learning","created":"2022-01-28","cited_by_count":46,"area":null},{"id":"2203.00949","title":"GAP: Differentially Private Graph Neural Networks with Aggregation Perturbation","created":"2022-03-02","cited_by_count":46,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2107.01154","title":"Gradient-Leakage Resilient Federated Learning","created":"2021-07-02","cited_by_count":40,"area":null},{"id":"2109.08604","title":"Enforcing fairness in private federated learning via the modified method of differential multipliers","created":"2021-09-17","cited_by_count":38,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2211.04446","title":"Private Set Generation with Discriminative Information","created":"2022-11-07","cited_by_count":34,"area":null},{"id":"2202.07178","title":"Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacy","created":"2022-02-15","cited_by_count":33,"area":null},{"id":"2109.08907","title":"Releasing Graph Neural Networks with Differential Privacy Guarantees","created":"2021-09-18","cited_by_count":32,"area":null},{"id":"2110.14153","title":"Differentially Private Federated Bayesian Optimization with Distributed Exploration","created":"2021-10-27","cited_by_count":32,"area":null},{"id":"2209.15328","title":"Sparse Random Networks for Communication-Efficient Federated Learning","created":"2022-09-30","cited_by_count":32,"area":null},{"id":"2111.00173","title":"Dynamic Differential-Privacy Preserving SGD","created":"2021-10-30","cited_by_count":30,"area":null},{"id":"2305.15759","title":"DP-LDMs: Differentially Private Latent Diffusion Models","created":"2023-05-25","cited_by_count":29,"area":"diffusion"},{"id":"2205.12900","title":"Pre-trained Perceptual Features Improve Differentially Private Image Generation","created":"2022-05-25","cited_by_count":28,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2302.04787","title":"On the Privacy-Robustness-Utility Trilemma in Distributed Learning","created":"2023-02-09","cited_by_count":24,"area":null},{"id":"2106.04590","title":"PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learning","created":"2021-06-08","cited_by_count":23,"area":null},{"id":"2201.09046","title":"Differentially Private SGDA for Minimax Problems","created":"2022-01-22","cited_by_count":23,"area":null},{"id":"2203.05481","title":"Fully Adaptive Composition in Differential Privacy","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2106.05042","title":"Hermite Polynomial Features for Private Data Generation","created":"2021-06-09","cited_by_count":21,"area":null},{"id":"2102.12412","title":"Computing Differential Privacy Guarantees for Heterogeneous Compositions Using FFT","created":"2021-02-24","cited_by_count":20,"area":null},{"id":"2110.08557","title":"DPNAS: Neural Architecture Search for Deep Learning with Differential Privacy","created":"2021-10-16","cited_by_count":20,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2209.15596","title":"Individual Privacy Accounting with Gaussian Differential Privacy","created":"2022-09-30","cited_by_count":20,"area":null},{"id":"2301.09112","title":"Differentially Private Natural Language Models: Recent Advances and Future Directions","created":"2023-01-22","cited_by_count":20,"area":null},{"id":"2107.01848","title":"Differentially Private Sliced Wasserstein Distance","created":"2021-07-05","cited_by_count":19,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2302.01463","title":"Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacy","created":"2023-02-02","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2405.01031","title":"The Privacy Power of Correlated Noise in Decentralized Learning","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2103.01294","title":"Wide Network Learning with Differential Privacy","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2302.02936","title":"Private GANs, Revisited","created":"2023-02-06","cited_by_count":17,"area":null},{"id":"2101.12240","title":"Differential Privacy Meets Federated Learning under Communication Constraints","created":"2021-01-28","cited_by_count":16,"area":null},{"id":"2105.05180","title":"On the Renyi Differential Privacy of the Shuffle Model","created":"2021-05-11","cited_by_count":16,"area":null},{"id":"2210.02156","title":"Fine-Tuning with Differential Privacy Necessitates an Additional Hyperparameter Search","created":"2022-10-05","cited_by_count":15,"area":null},{"id":"2303.01687","title":"Differentially Private Neural Tangent Kernels for Privacy-Preserving Data Generation","created":"2023-03-03","cited_by_count":15,"area":null},{"id":"2502.08202","title":"Privacy amplification by random allocation","created":"2025-02-12","cited_by_count":15,"area":null},{"id":"2101.09878","title":"Federated Intrusion Detection for IoT with Heterogeneous Cohort Privacy","created":"2021-01-25","cited_by_count":14,"area":null},{"id":"2206.04236","title":"Edgeworth Accountant: An Analytical Approach to Differential Privacy Composition","created":"2022-06-09","cited_by_count":14,"area":null},{"id":"2208.03409","title":"DP$^2$-VAE: Differentially Private Pre-trained Variational Autoencoders","created":"2022-08-05","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2205.09494","title":"Differentially private Riemannian optimization","created":"2022-05-19","cited_by_count":12,"area":null},{"id":"2209.04030","title":"Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks","created":"2022-09-08","cited_by_count":12,"area":null},{"id":"2401.00583","title":"Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learners","created":"2023-12-31","cited_by_count":12,"area":null},{"id":"2212.04486","title":"A New Linear Scaling Rule for Private Adaptive Hyperparameter Optimization","created":"2022-12-08","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2410.03883","title":"DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction","created":"2024-10-04","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2103.14068","title":"Differentially Private Normalizing Flows for Privacy-Preserving Density Estimation","created":"2021-03-25","cited_by_count":10,"area":null},{"id":"2207.10226","title":"Improving Privacy-Preserving Vertical Federated Learning by Efficient Communication with ADMM","created":"2022-07-20","cited_by_count":10,"area":null},{"id":"2210.06140","title":"Differentially Private Bootstrap: New Privacy Analysis and Inference Strategies","created":"2022-10-12","cited_by_count":10,"area":null},{"id":"2302.03884","title":"DIFF2: Differential Private Optimization via Gradient Differences for Nonconvex Distributed Learning","created":"2023-02-08","cited_by_count":10,"area":null},{"id":"2305.09903","title":"Privacy Loss of Noisy Stochastic Gradient Descent Might Converge Even for Non-Convex Losses","created":"2023-05-17","cited_by_count":10,"area":null},{"id":"2307.11228","title":"From Adaptive Query Release to Machine Unlearning","created":"2023-07-20","cited_by_count":10,"area":"safety"},{"id":"2410.12085","title":"Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning","created":"2024-10-15","cited_by_count":10,"area":null},{"id":"2502.15436","title":"Fed-SB: A Silver Bullet for Extreme Communication Efficiency and Performance in (Private) Federated LoRA Fine-Tuning","created":"2025-02-21","cited_by_count":10,"area":null},{"id":"2210.02910","title":"Federated Boosted Decision Trees with Differential Privacy","created":"2022-10-06","cited_by_count":9,"area":null},{"id":"2301.13273","title":"Near Optimal Private and Robust Linear Regression","created":"2023-01-30","cited_by_count":9,"area":null},{"id":"2305.16163","title":"PPGenCDR: A Stable and Robust Framework for Privacy-Preserving Cross-Domain Recommendation","created":"2023-05-11","cited_by_count":9,"area":null},{"id":"2308.12210","title":"ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacy","created":"2023-08-23","cited_by_count":9,"area":null},{"id":"2401.16251","title":"Cross-silo Federated Learning with Record-level Personalized Differential Privacy","created":"2024-01-29","cited_by_count":9,"area":null},{"id":"2405.06368","title":"DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptation","created":"2024-05-10","cited_by_count":9,"area":null},{"id":"2112.00845","title":"Improving Differentially Private SGD via Randomly Sparsified Gradients","created":"2021-12-01","cited_by_count":8,"area":null},{"id":"2308.14606","title":"On the Tradeoff between Privacy Preservation and Byzantine-Robustness in Decentralized Learning","created":"2023-08-28","cited_by_count":8,"area":null},{"id":"2405.08920","title":"Neural Collapse Meets Differential Privacy: Curious Behaviors of NoisyGD with Near-perfect Representation Learning","created":"2024-05-14","cited_by_count":8,"area":null},{"id":"2408.10456","title":"Differentially Private Stochastic Gradient Descent with Fixed-Size Minibatches: Tighter RDP Guarantees with or without Replacement","created":"2024-08-19","cited_by_count":8,"area":null},{"id":"2409.09558","title":"A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theorem","created":"2024-09-14","cited_by_count":8,"area":null},{"id":"2107.02521","title":"DTGAN: Differential Private Training for Tabular GANs","created":"2021-07-06","cited_by_count":7,"area":null},{"id":"2112.14430","title":"DP-FP: Differentially Private Forward Propagation for Large Models","created":"2021-12-29","cited_by_count":7,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2304.02932","title":"Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding","created":"2023-04-06","cited_by_count":7,"area":null},{"id":"2307.15424","title":"Deep Generative Models, Synthetic Tabular Data, and Differential Privacy: An Overview and Synthesis","created":"2023-07-28","cited_by_count":7,"area":null},{"id":"2311.14465","title":"DP-NMT: Scalable Differentially-Private Machine Translation","created":"2023-11-24","cited_by_count":7,"area":null}],"next_cursor":"100"}