{"total":122,"rows":[{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2106.04378","title":"Adaptive Machine Unlearning","created":"2021-06-08","cited_by_count":176,"area":"safety"},{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2102.06062","title":"Deep Learning with Label Differential Privacy","created":"2021-02-11","cited_by_count":117,"area":null},{"id":"2110.03620","title":"Hyperparameter Tuning with Renyi Differential Privacy","created":"2021-10-07","cited_by_count":104,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2108.12944","title":"Selective Differential Privacy for Language Modeling","created":"2021-08-30","cited_by_count":62,"area":null},{"id":"2312.06717","title":"Privacy Issues in Large Language Models: A Survey","created":"2023-12-11","cited_by_count":60,"area":null},{"id":"2112.00193","title":"Public Data-Assisted Mirror Descent for Private Model Training","created":"2021-12-01","cited_by_count":49,"area":null},{"id":"2205.10683","title":"Scalable and Efficient Training of Large Convolutional Neural Networks with Differential Privacy","created":"2022-05-21","cited_by_count":48,"area":null},{"id":"2201.12383","title":"Bounding Training Data Reconstruction in Private (Deep) Learning","created":"2022-01-28","cited_by_count":46,"area":null},{"id":"2106.07830","title":"On the Convergence and Calibration of Deep Learning with Differential Privacy","created":"2021-06-15","cited_by_count":36,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2202.07178","title":"Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacy","created":"2022-02-15","cited_by_count":33,"area":null},{"id":"2211.05427","title":"On the Privacy Risks of Algorithmic Recourse","created":"2022-11-10","cited_by_count":32,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2312.14334","title":"DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)","created":"2023-12-21","cited_by_count":28,"area":null},{"id":"2206.04621","title":"A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learning","created":"2022-06-09","cited_by_count":27,"area":null},{"id":"2203.00324","title":"Differentially private training of residual networks with scale normalisation","created":"2022-03-01","cited_by_count":26,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2110.06255","title":"Not all noise is accounted equally: How differentially private learning benefits from large sampling rates","created":"2021-10-12","cited_by_count":21,"area":null},{"id":"2212.00328","title":"Differentially Private Learning with Per-Sample Adaptive Clipping","created":"2022-12-01","cited_by_count":21,"area":null},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21,"area":null},{"id":"2110.08557","title":"DPNAS: Neural Architecture Search for Deep Learning with Differential Privacy","created":"2021-10-16","cited_by_count":20,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2206.10713","title":"Beyond Uniform Lipschitz Condition in Differentially Private Optimization","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2306.06076","title":"Differentially Private Image Classification by Learning Priors from Random Processes","created":"2023-06-08","cited_by_count":19,"area":null},{"id":"2203.08134","title":"Privacy-Aware Compression for Federated Data Analysis","created":"2022-03-15","cited_by_count":17,"area":null},{"id":"2202.11823","title":"Differentially Private Speaker Anonymization","created":"2022-02-23","cited_by_count":16,"area":null},{"id":"2308.10888","title":"Unlocking Accuracy and Fairness in Differentially Private Image Classification","created":"2023-08-21","cited_by_count":16,"area":null},{"id":"2210.02156","title":"Fine-Tuning with Differential Privacy Necessitates an Additional Hyperparameter Search","created":"2022-10-05","cited_by_count":15,"area":null},{"id":"2306.05651","title":"Differentially Private Sharpness-Aware Training","created":"2023-06-09","cited_by_count":14,"area":null},{"id":"2105.07985","title":"Gradient Masking and the Underestimated Robustness Threats of Differential Privacy in Deep Learning","created":"2021-05-17","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2306.00127","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2410.03883","title":"DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction","created":"2024-10-04","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2306.15742","title":"Differentially Private Video Activity Recognition","created":"2023-06-27","cited_by_count":9,"area":null},{"id":"2406.08918","title":"Beyond the Calibration Point: Mechanism Comparison in Differential Privacy","created":"2024-06-13","cited_by_count":9,"area":null},{"id":"2112.00845","title":"Improving Differentially Private SGD via Randomly Sparsified Gradients","created":"2021-12-01","cited_by_count":8,"area":null},{"id":"2211.05232","title":"MuMIC -- Multimodal Embedding for Multi-label Image Classification with Tempered Sigmoid","created":"2022-11-02","cited_by_count":8,"area":null},{"id":"2401.16457","title":"Effective Controllable Bias Mitigation for Classification and Retrieval using Gate Adapters","created":"2024-01-29","cited_by_count":8,"area":null},{"id":"2402.18752","title":"Pre-training Differentially Private Models with Limited Public Data","created":"2024-02-28","cited_by_count":8,"area":null},{"id":"2408.13460","title":"DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise Reduction","created":"2024-08-24","cited_by_count":8,"area":null},{"id":"2306.08173","title":"Safeguarding Data in Multimodal AI: A Differentially Private Approach to CLIP Training","created":"2023-06-13","cited_by_count":7,"area":null},{"id":"2107.08763","title":"Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learning","created":"2021-07-19","cited_by_count":6,"area":null},{"id":"2111.14924","title":"Architecture Matters: Investigating the Influence of Differential Privacy on Neural Network Design","created":"2021-11-29","cited_by_count":6,"area":null},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2307.12542","title":"Client-Level Differential Privacy via Adaptive Intermediary in Federated Medical Imaging","created":"2023-07-24","cited_by_count":6,"area":null},{"id":"2307.13231","title":"Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering","created":"2023-07-25","cited_by_count":6,"area":null},{"id":"2410.06577","title":"Rodimus*: Breaking the Accuracy-Efficiency Trade-Off with Efficient Attentions","created":"2024-10-09","cited_by_count":6,"area":null},{"id":"2503.22988","title":"DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimation","created":"2025-03-29","cited_by_count":6,"area":null},{"id":"2108.03888","title":"Efficient Hyperparameter Optimization for Differentially Private Deep Learning","created":"2021-08-09","cited_by_count":5,"area":null},{"id":"2303.04612","title":"Differential Privacy Meets Neural Network Pruning","created":"2023-03-08","cited_by_count":5,"area":null},{"id":"2303.08906","title":"VVS: Video-to-Video Retrieval with Irrelevant Frame Suppression","created":"2023-03-15","cited_by_count":5,"area":null},{"id":"2304.07460","title":"Communication and Energy Efficient Wireless Federated Learning with Intrinsic Privacy","created":"2023-04-15","cited_by_count":5,"area":null},{"id":"2311.08357","title":"Sparsity-Preserving Differentially Private Training of Large Embedding Models","created":"2023-11-14","cited_by_count":5,"area":null},{"id":"2405.18194","title":"Delving into Differentially Private Transformer","created":"2024-05-28","cited_by_count":5,"area":null},{"id":"2103.02895","title":"On the privacy-utility trade-off in differentially private hierarchical text classification","created":"2021-03-04","cited_by_count":4,"area":"safety"},{"id":"2107.04265","title":"Sensitivity analysis in differentially private machine learning using hybrid automatic differentiation","created":"2021-07-09","cited_by_count":4,"area":null},{"id":"2202.05089","title":"Backpropagation Clipping for Deep Learning with Differential Privacy","created":"2022-02-10","cited_by_count":4,"area":null},{"id":"2210.03843","title":"Differentially Private Deep Learning with ModelMix","created":"2022-10-07","cited_by_count":4,"area":null},{"id":"2211.11434","title":"Privacy in Practice: Private COVID-19 Detection in X-Ray Images (Extended Version)","created":"2022-11-21","cited_by_count":4,"area":null},{"id":"2311.17228","title":"Survey on AI Ethics: A Socio-technical Perspective","created":"2023-11-28","cited_by_count":4,"area":null},{"id":"2402.10686","title":"On the Impact of Uncertainty and Calibration on Likelihood-Ratio Membership Inference Attacks","created":"2024-02-16","cited_by_count":4,"area":"safety"},{"id":"2406.02744","title":"DPDR: Gradient Decomposition and Reconstruction for Differentially Private Deep Learning","created":"2024-06-04","cited_by_count":4,"area":null},{"id":"2409.02404","title":"Learning Privacy-Preserving Student Networks via Discriminative-Generative Distillation","created":"2024-09-04","cited_by_count":4,"area":null},{"id":"2505.05707","title":"Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacy","created":"2025-05-09","cited_by_count":4,"area":null},{"id":"2205.04095","title":"SmoothNets: Optimizing CNN architecture design for differentially private deep learning","created":"2022-05-09","cited_by_count":3,"area":null},{"id":"2205.06720","title":"On the Importance of Architecture and Feature Selection in Differentially Private Machine Learning","created":"2022-05-13","cited_by_count":3,"area":null},{"id":"2304.12829","title":"Improving Robustness Against Adversarial Attacks with Deeply Quantized Neural Networks","created":"2023-04-25","cited_by_count":3,"area":null},{"id":"2306.11754","title":"Pre-Pruning and Gradient-Dropping Improve Differentially Private Image Classification","created":"2023-06-19","cited_by_count":3,"area":null},{"id":"2511.18006","title":"Understanding Private Learning From Feature Perspective","created":"2025-11-22","cited_by_count":3,"area":null},{"id":"2109.10573","title":"An automatic differentiation system for the age of differential privacy","created":"2021-09-22","cited_by_count":2,"area":null},{"id":"2202.06467","title":"NeuroMixGDP: A Neural Collapse-Inspired Random Mixup for Private Data Release","created":"2022-02-14","cited_by_count":2,"area":null},{"id":"2302.04840","title":"What are the mechanisms underlying metacognitive learning?","created":"2023-02-09","cited_by_count":2,"area":null},{"id":"2309.04515","title":"Privacy Preserving Federated Learning with Convolutional Variational Bottlenecks","created":"2023-09-08","cited_by_count":2,"area":null},{"id":"2402.06606","title":"RQP-SGD: Differential Private Machine Learning through Noisy SGD and Randomized Quantization","created":"2024-02-09","cited_by_count":2,"area":null},{"id":"2407.04884","title":"Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacy","created":"2024-07-05","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2205.12718","title":"DPSNN: A Differentially Private Spiking Neural Network with Temporal Enhanced Pooling","created":"2022-05-24","cited_by_count":1,"area":null},{"id":"2207.07311","title":"Towards Privacy-Preserving Person Re-identification via Person Identify Shift","created":"2022-07-15","cited_by_count":1,"area":null},{"id":"2210.01864","title":"Recycling Scraps: Improving Private Learning by Leveraging Intermediate Checkpoints","created":"2022-10-04","cited_by_count":1,"area":null},{"id":"2211.04686","title":"Directional Privacy for Deep Learning","created":"2022-11-09","cited_by_count":1,"area":null},{"id":"2211.07218","title":"SA-DPSGD: Differentially Private Stochastic Gradient Descent based on Simulated Annealing","created":"2022-11-14","cited_by_count":1,"area":null},{"id":"2311.06839","title":"Inference and Interference: The Role of Clipping, Pruning and Loss Landscapes in Differentially Private Stochastic Gradient Descent","created":"2023-11-12","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2407.19286","title":"On Using Secure Aggregation in Differentially Private Federated Learning with Multiple Local Steps","created":"2024-07-27","cited_by_count":1,"area":null},{"id":"2411.02051","title":"R+R:Understanding Hyperparameter Effects in DP-SGD","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2502.05765","title":"Privacy-Preserving Dataset Combination","created":"2025-02-09","cited_by_count":1,"area":null},{"id":"2503.21426","title":"AdvSGM: Differentially Private Graph Learning via Adversarial Skip-gram Model","created":"2025-03-27","cited_by_count":1,"area":null}],"next_cursor":"100"}