{"total":210,"rows":[{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2108.01624","title":"Large-Scale Differentially Private BERT","created":"2021-08-03","cited_by_count":118,"area":null},{"id":"2102.08504","title":"Label Leakage and Protection in Two-party Split Learning","created":"2021-02-17","cited_by_count":90,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2106.07820","title":"On Large-Cohort Training for Federated Learning","created":"2021-06-15","cited_by_count":74,"area":null},{"id":"2111.09278","title":"Differentially Private Federated Learning on Heterogeneous Data","created":"2021-11-17","cited_by_count":74,"area":null},{"id":"2106.13673","title":"Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacy","created":"2021-06-25","cited_by_count":69,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2305.18465","title":"Federated Learning of Gboard Language Models with Differential Privacy","created":"2023-05-29","cited_by_count":66,"area":null},{"id":"2108.12944","title":"Selective Differential Privacy for Language Modeling","created":"2021-08-30","cited_by_count":62,"area":null},{"id":"2202.08312","title":"Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streams","created":"2022-02-16","cited_by_count":59,"area":null},{"id":"2203.11481","title":"Mixed Differential Privacy in Computer Vision","created":"2022-03-22","cited_by_count":54,"area":null},{"id":"2212.01539","title":"Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping","created":"2022-12-03","cited_by_count":52,"area":null},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2203.03761","title":"The Fundamental Price of Secure Aggregation in Differentially Private Federated Learning","created":"2022-03-07","cited_by_count":39,"area":null},{"id":"2202.05963","title":"Private Adaptive Optimization with Side Information","created":"2022-02-12","cited_by_count":38,"area":null},{"id":"2203.03106","title":"Differentially Private Federated Learning with Local Regularization and Sparsification","created":"2022-03-07","cited_by_count":36,"area":null},{"id":"2206.07902","title":"On Privacy and Personalization in Cross-Silo Federated Learning","created":"2022-06-16","cited_by_count":36,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2202.07178","title":"Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacy","created":"2022-02-15","cited_by_count":33,"area":null},{"id":"2303.11242","title":"Make Landscape Flatter in Differentially Private Federated Learning","created":"2023-03-20","cited_by_count":33,"area":null},{"id":"2209.15328","title":"Sparse Random Networks for Communication-Efficient Federated Learning","created":"2022-09-30","cited_by_count":32,"area":null},{"id":"2302.07173","title":"An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learning","created":"2023-02-14","cited_by_count":32,"area":null},{"id":"2103.11109","title":"DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation","created":"2021-03-20","cited_by_count":31,"area":null},{"id":"2206.07737","title":"Disparate Impact in Differential Privacy from Gradient Misalignment","created":"2022-06-15","cited_by_count":31,"area":null},{"id":"2111.00173","title":"Dynamic Differential-Privacy Preserving SGD","created":"2021-10-30","cited_by_count":30,"area":null},{"id":"2305.12132","title":"Can Public Large Language Models Help Private Cross-device Federated Learning?","created":"2023-05-20","cited_by_count":30,"area":null},{"id":"2405.10853","title":"The Future of Large Language Model Pre-training is Federated","created":"2024-05-17","cited_by_count":30,"area":null},{"id":"2102.03013","title":"Fast and Memory Efficient Differentially Private-SGD via JL Projections","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2107.14586","title":"An Efficient DP-SGD Mechanism for Large Scale NLP Models","created":"2021-07-14","cited_by_count":27,"area":null},{"id":"2302.06322","title":"One-Shot Federated Conformal Prediction","created":"2023-02-13","cited_by_count":27,"area":null},{"id":"2111.04906","title":"The Role of Adaptive Optimizers for Honest Private Hyperparameter Selection","created":"2021-11-09","cited_by_count":25,"area":null},{"id":"2205.13709","title":"DP-PCA: Statistically Optimal and Differentially Private PCA","created":"2022-05-27","cited_by_count":24,"area":null},{"id":"2211.10844","title":"Learning to Generate Image Embeddings with User-level Differential Privacy","created":"2022-11-20","cited_by_count":23,"area":null},{"id":"2207.08869","title":"FLAIR: Federated Learning Annotated Image Repository","created":"2022-07-18","cited_by_count":22,"area":null},{"id":"2212.00328","title":"Differentially Private Learning with Per-Sample Adaptive Clipping","created":"2022-12-01","cited_by_count":21,"area":null},{"id":"2110.08557","title":"DPNAS: Neural Architecture Search for Deep Learning with Differential Privacy","created":"2021-10-16","cited_by_count":20,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2301.09112","title":"Differentially Private Natural Language Models: Recent Advances and Future Directions","created":"2023-01-22","cited_by_count":20,"area":null},{"id":"2206.10713","title":"Beyond Uniform Lipschitz Condition in Differentially Private Optimization","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2302.01463","title":"Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacy","created":"2023-02-02","cited_by_count":18,"area":null},{"id":"2103.01294","title":"Wide Network Learning with Differential Privacy","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2205.14324","title":"Differentially Private Covariance Revisited","created":"2022-05-28","cited_by_count":15,"area":null},{"id":"2407.06754","title":"Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2305.06473","title":"Securing Distributed SGD against Gradient Leakage Threats","created":"2023-05-10","cited_by_count":14,"area":null},{"id":"2306.05651","title":"Differentially Private Sharpness-Aware Training","created":"2023-06-09","cited_by_count":14,"area":null},{"id":"2311.14632","title":"Differentially Private SGD Without Clipping Bias: An Error-Feedback Approach","created":"2023-11-24","cited_by_count":14,"area":null},{"id":"2211.15893","title":"Adap DP-FL: Differentially Private Federated Learning with Adaptive Noise","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2402.05968","title":"Federated Learning Priorities Under the European Union Artificial Intelligence Act","created":"2024-02-05","cited_by_count":13,"area":null},{"id":"2502.07923","title":"Sign Operator for Coping with Heavy-Tailed Noise in Non-Convex Optimization: High Probability Bounds Under $(L_0, L_1)$-Smoothness","created":"2025-02-11","cited_by_count":13,"area":null},{"id":"2302.01190","title":"On the Efficacy of Differentially Private Few-shot Image Classification","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2410.03883","title":"DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction","created":"2024-10-04","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2110.11688","title":"Differentially Private Coordinate Descent for Composite Empirical Risk Minimization","created":"2021-10-22","cited_by_count":10,"area":null},{"id":"2111.05454","title":"DP-REC: Private & Communication-Efficient Federated Learning","created":"2021-11-09","cited_by_count":10,"area":null},{"id":"2210.00690","title":"Taming Fat-Tailed (\"Heavier-Tailed'' with Potentially Infinite Variance) Noise in Federated Learning","created":"2022-10-03","cited_by_count":10,"area":null},{"id":"2301.13273","title":"Near Optimal Private and Robust Linear Regression","created":"2023-01-30","cited_by_count":9,"area":null},{"id":"2112.00845","title":"Improving Differentially Private SGD via Randomly Sparsified Gradients","created":"2021-12-01","cited_by_count":8,"area":null},{"id":"2309.03437","title":"Byzantine-Robust Federated Learning with Variance Reduction and Differential Privacy","created":"2023-09-07","cited_by_count":8,"area":null},{"id":"2404.06430","title":"pfl-research: simulation framework for accelerating research in Private Federated Learning","created":"2024-04-09","cited_by_count":8,"area":null},{"id":"2406.01960","title":"Certifiably Byzantine-Robust Federated Conformal Prediction","created":"2024-06-04","cited_by_count":8,"area":null},{"id":"2408.13460","title":"DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise Reduction","created":"2024-08-24","cited_by_count":8,"area":null},{"id":"2504.09522","title":"How new data permeates LLM knowledge and how to dilute it","created":"2025-04-13","cited_by_count":8,"area":null},{"id":"2112.14430","title":"DP-FP: Differentially Private Forward Propagation for Large Models","created":"2021-12-29","cited_by_count":7,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2302.07155","title":"EPISODE: Episodic Gradient Clipping with Periodic Resampled Corrections for Federated Learning with Heterogeneous Data","created":"2023-02-14","cited_by_count":7,"area":null},{"id":"2310.19215","title":"On the accuracy and efficiency of group-wise clipping in differentially private optimization","created":"2023-10-30","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2503.00703","title":"Towards hyperparameter-free optimization with differential privacy","created":"2025-03-02","cited_by_count":7,"area":null},{"id":"2503.04564","title":"Fundamental Limits of Hierarchical Secure Aggregation with Cyclic User Association","created":"2025-03-06","cited_by_count":7,"area":null},{"id":"2207.04686","title":"(Nearly) Optimal Private Linear Regression via Adaptive Clipping","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2211.11896","title":"Private Ad Modeling with DP-SGD","created":"2022-11-21","cited_by_count":6,"area":null},{"id":"2306.08745","title":"PLAN: Variance-Aware Private Mean Estimation","created":"2023-06-14","cited_by_count":6,"area":null},{"id":"2307.12542","title":"Client-Level Differential Privacy via Adaptive Intermediary in Federated Medical Imaging","created":"2023-07-24","cited_by_count":6,"area":null},{"id":"2307.13231","title":"Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering","created":"2023-07-25","cited_by_count":6,"area":null},{"id":"2503.22988","title":"DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimation","created":"2025-03-29","cited_by_count":6,"area":null},{"id":"2101.07413","title":"Dynamic Privacy Budget Allocation Improves Data Efficiency of Differentially Private Gradient Descent","created":"2021-01-19","cited_by_count":5,"area":null},{"id":"2106.07094","title":"On the Convergence of Differentially Private Federated Learning on Non-Lipschitz Objectives, and with Normalized Client Updates","created":"2021-06-13","cited_by_count":5,"area":null},{"id":"2108.03888","title":"Efficient Hyperparameter Optimization for Differentially Private Deep Learning","created":"2021-08-09","cited_by_count":5,"area":null},{"id":"2110.07435","title":"Adaptive Differentially Private Empirical Risk Minimization","created":"2021-10-14","cited_by_count":5,"area":null},{"id":"2110.15252","title":"Federated Learning with Heterogeneous Differential Privacy","created":"2021-10-28","cited_by_count":5,"area":null},{"id":"2206.03396","title":"Group privacy for personalized federated learning","created":"2022-06-07","cited_by_count":5,"area":null},{"id":"2210.11222","title":"Learning-Augmented Private Algorithms for Multiple Quantile Release","created":"2022-10-20","cited_by_count":5,"area":null},{"id":"2305.00873","title":"Towards the Flatter Landscape and Better Generalization in Federated Learning under Client-level Differential Privacy","created":"2023-05-01","cited_by_count":5,"area":null},{"id":"2405.14446","title":"Worldwide Federated Training of Language Models","created":"2024-05-23","cited_by_count":5,"area":null},{"id":"2405.17529","title":"Clip Body and Tail Separately: High Probability Guarantees for DPSGD with Heavy Tails","created":"2024-05-27","cited_by_count":5,"area":null},{"id":"2502.18706","title":"Differentially Private Federated Learning With Time-Adaptive Privacy Spending","created":"2025-02-25","cited_by_count":5,"area":null},{"id":"2111.09248","title":"Privacy-preserving Federated Learning for Residential Short Term Load Forecasting","created":"2021-11-17","cited_by_count":4,"area":null},{"id":"2202.07165","title":"OLIVE: Oblivious Federated Learning on Trusted Execution Environment against the risk of sparsification","created":"2022-02-15","cited_by_count":4,"area":null}],"next_cursor":"100"}