{"total":164,"rows":[{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2102.06062","title":"Deep Learning with Label Differential Privacy","created":"2021-02-11","cited_by_count":117,"area":null},{"id":"2102.08504","title":"Label Leakage and Protection in Two-party Split Learning","created":"2021-02-17","cited_by_count":90,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2111.09278","title":"Differentially Private Federated Learning on Heterogeneous Data","created":"2021-11-17","cited_by_count":74,"area":null},{"id":"2309.06746","title":"DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass","created":"2023-09-13","cited_by_count":67,"area":"safety"},{"id":"2211.06530","title":"Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learning","created":"2022-11-12","cited_by_count":48,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2203.03761","title":"The Fundamental Price of Secure Aggregation in Differentially Private Federated Learning","created":"2022-03-07","cited_by_count":39,"area":null},{"id":"2205.02466","title":"Optimal Algorithms for Mean Estimation under Local Differential Privacy","created":"2022-05-05","cited_by_count":36,"area":null},{"id":"2206.07902","title":"On Privacy and Personalization in Cross-Silo Federated Learning","created":"2022-06-16","cited_by_count":36,"area":null},{"id":"2202.07178","title":"Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacy","created":"2022-02-15","cited_by_count":33,"area":null},{"id":"2209.15328","title":"Sparse Random Networks for Communication-Efficient Federated Learning","created":"2022-09-30","cited_by_count":32,"area":null},{"id":"2106.09779","title":"Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Losses","created":"2021-06-17","cited_by_count":30,"area":null},{"id":"2208.04591","title":"Stronger Privacy Amplification by Shuffling for R\\'enyi and Approximate Differential Privacy","created":"2022-08-09","cited_by_count":29,"area":null},{"id":"2102.12099","title":"Lossless Compression of Efficient Private Local Randomizers","created":"2021-02-24","cited_by_count":27,"area":null},{"id":"2107.14586","title":"An Efficient DP-SGD Mechanism for Large Scale NLP Models","created":"2021-07-14","cited_by_count":27,"area":null},{"id":"2202.05567","title":"Shuffle Private Linear Contextual Bandits","created":"2022-02-11","cited_by_count":27,"area":null},{"id":"2203.01451","title":"Label Leakage and Protection from Forward Embedding in Vertical Federated Learning","created":"2022-03-02","cited_by_count":27,"area":null},{"id":"2206.05091","title":"Muffliato: Peer-to-Peer Privacy Amplification for Decentralized Optimization and Averaging","created":"2022-06-10","cited_by_count":27,"area":null},{"id":"2105.03941","title":"Stronger Privacy for Federated Collaborative Filtering with Implicit Feedback","created":"2021-05-09","cited_by_count":26,"area":null},{"id":"2203.06735","title":"Private Non-Convex Federated Learning Without a Trusted Server","created":"2022-03-13","cited_by_count":26,"area":null},{"id":"2112.06872","title":"Efficient Differentially Private Secure Aggregation for Federated Learning via Hardness of Learning with Errors","created":"2021-12-13","cited_by_count":25,"area":null},{"id":"2106.02900","title":"Differentially Private Multi-Armed Bandits in the Shuffle Model","created":"2021-06-05","cited_by_count":24,"area":null},{"id":"2205.13709","title":"DP-PCA: Statistically Optimal and Differentially Private PCA","created":"2022-05-27","cited_by_count":24,"area":null},{"id":"2103.01953","title":"Privacy Amplification for Federated Learning via User Sampling and Wireless Aggregation","created":"2021-03-02","cited_by_count":22,"area":null},{"id":"2111.00092","title":"Optimal Compression of Locally Differentially Private Mechanisms","created":"2021-10-29","cited_by_count":22,"area":null},{"id":"2304.01541","title":"Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimation","created":"2023-04-04","cited_by_count":22,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2107.09898","title":"Defending against Reconstruction Attack in Vertical Federated Learning","created":"2021-07-21","cited_by_count":20,"area":null},{"id":"2110.02159","title":"Label differential privacy via clustering","created":"2021-10-05","cited_by_count":20,"area":null},{"id":"2104.09734","title":"Locally Private k-Means in One Round","created":"2021-04-20","cited_by_count":19,"area":null},{"id":"2207.03445","title":"Differentially Private Stochastic Linear Bandits: (Almost) for Free","created":"2022-07-07","cited_by_count":19,"area":null},{"id":"2101.11693","title":"Dopamine: Differentially Private Federated Learning on Medical Data","created":"2021-01-27","cited_by_count":18,"area":null},{"id":"2102.08166","title":"Differential Privacy and Byzantine Resilience in SGD: Do They Add Up?","created":"2021-02-16","cited_by_count":18,"area":null},{"id":"2302.01463","title":"Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacy","created":"2023-02-02","cited_by_count":18,"area":null},{"id":"2405.01031","title":"The Privacy Power of Correlated Noise in Decentralized Learning","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2106.09805","title":"Shuffle Private Stochastic Convex Optimization","created":"2021-06-17","cited_by_count":17,"area":null},{"id":"2112.06008","title":"Privacy Amplification via Shuffling for Linear Contextual Bandits","created":"2021-12-11","cited_by_count":17,"area":null},{"id":"2211.03757","title":"Discrete Distribution Estimation under User-level Local Differential Privacy","created":"2022-11-07","cited_by_count":17,"area":null},{"id":"2310.15526","title":"Privacy Amplification for Matrix Mechanisms","created":"2023-10-24","cited_by_count":17,"area":null},{"id":"2105.05180","title":"On the Renyi Differential Privacy of the Shuffle Model","created":"2021-05-11","cited_by_count":16,"area":null},{"id":"2202.11823","title":"Differentially Private Speaker Anonymization","created":"2022-02-23","cited_by_count":16,"area":null},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16,"area":null},{"id":"2210.02156","title":"Fine-Tuning with Differential Privacy Necessitates an Additional Hyperparameter Search","created":"2022-10-05","cited_by_count":15,"area":null},{"id":"2502.08202","title":"Privacy amplification by random allocation","created":"2025-02-12","cited_by_count":15,"area":null},{"id":"2206.05772","title":"Distributed Differential Privacy in Multi-Armed Bandits","created":"2022-06-12","cited_by_count":14,"area":null},{"id":"2207.00083","title":"DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardware","created":"2022-06-30","cited_by_count":14,"area":null},{"id":"2302.13945","title":"On Differentially Private Federated Linear Contextual Bandits","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2306.04444","title":"Fast Optimal Locally Private Mean Estimation via Random Projections","created":"2023-06-07","cited_by_count":14,"area":null},{"id":"2212.04486","title":"A New Linear Scaling Rule for Private Adaptive Hyperparameter Optimization","created":"2022-12-08","cited_by_count":11,"area":null},{"id":"2111.02356","title":"Towards Sparse Federated Analytics: Location Heatmaps under Distributed Differential Privacy with Secure Aggregation","created":"2021-11-03","cited_by_count":10,"area":null},{"id":"2106.04384","title":"FL-Market: Trading Private Models in Federated Learning","created":"2021-06-08","cited_by_count":9,"area":null},{"id":"2110.11208","title":"User-Level Private Learning via Correlated Sampling","created":"2021-10-21","cited_by_count":9,"area":null},{"id":"2203.00194","title":"Private Frequency Estimation via Projective Geometry","created":"2022-03-01","cited_by_count":9,"area":null},{"id":"2104.01808","title":"Frequency Estimation Under Multiparty Differential Privacy: One-shot and Streaming","created":"2021-04-05","cited_by_count":8,"area":null},{"id":"2207.05827","title":"Differentially Private Linear Bandits with Partial Distributed Feedback","created":"2022-07-12","cited_by_count":8,"area":null},{"id":"2210.13386","title":"Contraction of Locally Differentially Private Mechanisms","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2301.07284","title":"Label Inference Attack against Split Learning under Regression Setting","created":"2023-01-18","cited_by_count":8,"area":null},{"id":"2405.20782","title":"Universal Exact Compression of Differentially Private Mechanisms","created":"2024-05-28","cited_by_count":8,"area":null},{"id":"2409.09558","title":"A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theorem","created":"2024-09-14","cited_by_count":8,"area":null},{"id":"2505.01874","title":"Towards Trustworthy Federated Learning with Untrusted Participants","created":"2025-05-03","cited_by_count":8,"area":null},{"id":"2208.12294","title":"DPAUC: Differentially Private AUC Computation in Federated Learning","created":"2022-08-25","cited_by_count":7,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2212.04371","title":"Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy","created":"2022-12-08","cited_by_count":7,"area":null},{"id":"2301.00955","title":"Differentially Private Federated Clustering over Non-IID Data","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2311.14465","title":"DP-NMT: Scalable Differentially-Private Machine Translation","created":"2023-11-24","cited_by_count":7,"area":null},{"id":"2503.03043","title":"Leveraging Randomness in Model and Data Partitioning for Privacy Amplification","created":"2025-03-04","cited_by_count":7,"area":null},{"id":"2107.08763","title":"Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learning","created":"2021-07-19","cited_by_count":6,"area":null},{"id":"2111.09445","title":"FLSys: Toward an Open Ecosystem for Federated Learning Mobile Apps","created":"2021-11-17","cited_by_count":6,"area":null},{"id":"2204.03919","title":"Network Shuffling: Privacy Amplification via Random Walks","created":"2022-04-08","cited_by_count":6,"area":null},{"id":"2307.15017","title":"Samplable Anonymous Aggregation for Private Federated Data Analysis","created":"2023-07-27","cited_by_count":6,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null},{"id":"2106.00477","title":"Tight Accounting in the Shuffle Model of Differential Privacy","created":"2021-06-01","cited_by_count":5,"area":null},{"id":"2202.10618","title":"Differential Secrecy for Distributed Data and Applications to Robust Differentially Secure Vector Summation","created":"2022-02-22","cited_by_count":5,"area":null},{"id":"2206.03396","title":"Group privacy for personalized federated learning","created":"2022-06-07","cited_by_count":5,"area":null},{"id":"2404.10201","title":"Private Vector Mean Estimation in the Shuffle Model: Optimal Rates Require Many Messages","created":"2024-04-16","cited_by_count":5,"area":null},{"id":"2105.10594","title":"Privacy Amplification Via Bernoulli Sampling","created":"2021-05-21","cited_by_count":4,"area":null},{"id":"2106.11767","title":"Privacy Amplification via Iteration for Shuffled and Online PNSGD","created":"2021-06-20","cited_by_count":4,"area":null},{"id":"2202.07165","title":"OLIVE: Oblivious Federated Learning on Trusted Execution Environment against the risk of sparsification","created":"2022-02-15","cited_by_count":4,"area":null},{"id":"2206.05209","title":"Hierarchical Federated Learning with Privacy","created":"2022-06-10","cited_by_count":4,"area":null},{"id":"2206.09569","title":"Shuffle Gaussian Mechanism for Differential Privacy","created":"2022-06-20","cited_by_count":4,"area":null},{"id":"2209.04053","title":"Algorithms with More Granular Differential Privacy Guarantees","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2304.05516","title":"Echo of Neighbors: Privacy Amplification for Personalized Private Federated Learning with Shuffle Model","created":"2023-04-11","cited_by_count":4,"area":null},{"id":"2310.06237","title":"Differentially Private Multi-Site Treatment Effect Estimation","created":"2023-10-10","cited_by_count":4,"area":null},{"id":"2311.18190","title":"Toward the Tradeoffs between Privacy, Fairness and Utility in Federated Learning","created":"2023-11-30","cited_by_count":4,"area":null},{"id":"2405.02341","title":"Improved Communication-Privacy Trade-offs in $L_2$ Mean Estimation under Streaming Differential Privacy","created":"2024-05-02","cited_by_count":4,"area":null},{"id":"2407.03289","title":"Correlated Privacy Mechanisms for Differentially Private Distributed Mean Estimation","created":"2024-07-03","cited_by_count":4,"area":null},{"id":"2601.10237","title":"Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD","created":"2026-01-15","cited_by_count":4,"area":null},{"id":"2205.12412","title":"Differentially Private AUC Computation in Vertical Federated Learning","created":"2022-05-24","cited_by_count":3,"area":null},{"id":"2206.12183","title":"\"You Can't Fix What You Can't Measure\": Privately Measuring Demographic Performance Disparities in Federated Learning","created":"2022-06-24","cited_by_count":3,"area":null},{"id":"2208.07922","title":"FedPerm: Private and Robust Federated Learning by Parameter Permutation","created":"2022-08-16","cited_by_count":3,"area":null},{"id":"2212.03080","title":"Straggler-Resilient Differentially-Private Decentralized Learning","created":"2022-12-06","cited_by_count":3,"area":null},{"id":"2410.16161","title":"DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning Based on Constant-Overhead Linear Secret Resharing","created":"2024-10-21","cited_by_count":3,"area":null},{"id":"2502.14087","title":"Learning from End User Data with Shuffled Differential Privacy over Kernel Densities","created":"2025-02-19","cited_by_count":3,"area":null},{"id":"2509.22907","title":"FedCF: Fair Federated Conformal Prediction","created":"2025-09-26","cited_by_count":3,"area":null}],"next_cursor":"100"}