{"total":235,"rows":[{"id":"2110.05679","title":"Large Language Models Can Be Strong Differentially Private Learners","created":"2021-10-12","cited_by_count":412,"area":null},{"id":"2110.06500","title":"Differentially Private Fine-tuning of Language Models","created":"2021-10-13","cited_by_count":400,"area":null},{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2112.00059","title":"Evaluating Gradient Inversion Attacks and Defenses in Federated Learning","created":"2021-11-30","cited_by_count":196,"area":null},{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127,"area":null},{"id":"2210.09929","title":"Differentially Private Diffusion Models","created":"2022-10-18","cited_by_count":119,"area":"diffusion"},{"id":"2102.06062","title":"Deep Learning with Label Differential Privacy","created":"2021-02-11","cited_by_count":117,"area":null},{"id":"2302.10870","title":"On Provable Copyright Protection for Generative Models","created":"2023-02-21","cited_by_count":98,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2212.06470","title":"Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining","created":"2022-12-13","cited_by_count":88,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2305.15594","title":"Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models","created":"2023-05-24","cited_by_count":83,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2203.11481","title":"Mixed Differential Privacy in Computer Vision","created":"2022-03-22","cited_by_count":54,"area":null},{"id":"2310.05077","title":"FedFed: Feature Distillation against Data Heterogeneity in Federated Learning","created":"2023-10-08","cited_by_count":54,"area":"distill"},{"id":"2206.02465","title":"Virtual Homogeneity Learning: Defending against Data Heterogeneity in Federated Learning","created":"2022-06-06","cited_by_count":52,"area":null},{"id":"2210.03403","title":"TAN Without a Burn: Scaling Laws of DP-SGD","created":"2022-10-07","cited_by_count":52,"area":null},{"id":"2212.01539","title":"Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping","created":"2022-12-03","cited_by_count":52,"area":null},{"id":"2402.10052","title":"UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2112.00193","title":"Public Data-Assisted Mirror Descent for Private Model Training","created":"2021-12-01","cited_by_count":49,"area":null},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2205.10683","title":"Scalable and Efficient Training of Large Convolutional Neural Networks with Differential Privacy","created":"2022-05-21","cited_by_count":48,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2201.12383","title":"Bounding Training Data Reconstruction in Private (Deep) Learning","created":"2022-01-28","cited_by_count":46,"area":null},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46,"area":"safety"},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2302.09483","title":"Why Is Public Pretraining Necessary for Private Model Training?","created":"2023-02-19","cited_by_count":37,"area":null},{"id":"2206.13033","title":"Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimization","created":"2022-06-27","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2211.04446","title":"Private Set Generation with Discriminative Information","created":"2022-11-07","cited_by_count":34,"area":null},{"id":"2204.07667","title":"Just Fine-tune Twice: Selective Differential Privacy for Large Language Models","created":"2022-04-15","cited_by_count":32,"area":null},{"id":"2208.07984","title":"Private Estimation with Public Data","created":"2022-08-16","cited_by_count":32,"area":null},{"id":"2201.00971","title":"Submix: Practical Private Prediction for Large-Scale Language Models","created":"2022-01-04","cited_by_count":31,"area":null},{"id":"2103.07567","title":"Privacy Regularization: Joint Privacy-Utility Optimization in Language Models","created":"2021-03-12","cited_by_count":30,"area":null},{"id":"2406.02958","title":"PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs","created":"2024-06-05","cited_by_count":29,"area":null},{"id":"2106.13973","title":"Benchmarking Differential Privacy and Federated Learning for BERT Models","created":"2021-06-26","cited_by_count":28,"area":null},{"id":"2205.12900","title":"Pre-trained Perceptual Features Improve Differentially Private Image Generation","created":"2022-05-25","cited_by_count":28,"area":null},{"id":"2203.00324","title":"Differentially private training of residual networks with scale normalisation","created":"2022-03-01","cited_by_count":26,"area":null},{"id":"2203.02073","title":"Differentially Private Label Protection in Split Learning","created":"2022-03-04","cited_by_count":26,"area":null},{"id":"2111.04906","title":"The Role of Adaptive Optimizers for Honest Private Hyperparameter Selection","created":"2021-11-09","cited_by_count":25,"area":null},{"id":"2301.10053","title":"A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Data","created":"2023-01-24","cited_by_count":24,"area":null},{"id":"2209.14987","title":"No Free Lunch in \"Privacy for Free: How does Dataset Condensation Help Privacy\"","created":"2022-09-29","cited_by_count":23,"area":null},{"id":"2305.13865","title":"Selective Pre-training for Private Fine-tuning","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22,"area":null},{"id":"2110.06255","title":"Not all noise is accounted equally: How differentially private learning benefits from large sampling rates","created":"2021-10-12","cited_by_count":21,"area":null},{"id":"2110.14019","title":"Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detection","created":"2021-10-26","cited_by_count":21,"area":null},{"id":"2212.00328","title":"Differentially Private Learning with Per-Sample Adaptive Clipping","created":"2022-12-01","cited_by_count":21,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21,"area":null},{"id":"2110.08557","title":"DPNAS: Neural Architecture Search for Deep Learning with Differential Privacy","created":"2021-10-16","cited_by_count":20,"area":null},{"id":"2201.11980","title":"Differential Privacy Guarantees for Stochastic Gradient Langevin Dynamics","created":"2022-01-28","cited_by_count":19,"area":null},{"id":"2302.14517","title":"Arbitrary Decisions are a Hidden Cost of Differentially Private Training","created":"2023-02-28","cited_by_count":19,"area":null},{"id":"2306.06076","title":"Differentially Private Image Classification by Learning Priors from Random Processes","created":"2023-06-08","cited_by_count":19,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2203.08134","title":"Privacy-Aware Compression for Federated Data Analysis","created":"2022-03-15","cited_by_count":17,"area":null},{"id":"2302.02936","title":"Private GANs, Revisited","created":"2023-02-06","cited_by_count":17,"area":null},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2303.12247","title":"Exploring the Benefits of Visual Prompting in Differential Privacy","created":"2023-03-22","cited_by_count":17,"area":null},{"id":"2306.08842","title":"ViP: A Differentially Private Foundation Model for Computer Vision","created":"2023-06-15","cited_by_count":17,"area":null},{"id":"2404.04360","title":"Prompt Public Large Language Models to Synthesize Data for Private On-device Applications","created":"2024-04-05","cited_by_count":17,"area":null},{"id":"2201.09398","title":"Towards Private Learning on Decentralized Graphs with Local Differential Privacy","created":"2022-01-23","cited_by_count":16,"area":null},{"id":"2308.10888","title":"Unlocking Accuracy and Fairness in Differentially Private Image Classification","created":"2023-08-21","cited_by_count":16,"area":null},{"id":"2311.15792","title":"Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2202.12232","title":"Bounding Membership Inference","created":"2022-02-24","cited_by_count":15,"area":"safety"},{"id":"2210.02156","title":"Fine-Tuning with Differential Privacy Necessitates an Additional Hyperparameter Search","created":"2022-10-05","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2306.05651","title":"Differentially Private Sharpness-Aware Training","created":"2023-06-09","cited_by_count":14,"area":null},{"id":"2308.06239","title":"Private Distribution Learning with Public Data: The View from Sample Compression","created":"2023-08-11","cited_by_count":14,"area":null},{"id":"2110.03450","title":"Efficient and Private Federated Learning with Partially Trainable Networks","created":"2021-10-06","cited_by_count":13,"area":null},{"id":"2202.03402","title":"Preserving Privacy and Security in Federated Learning","created":"2022-02-07","cited_by_count":13,"area":null},{"id":"2206.01838","title":"Differentially Private Model Compression","created":"2022-06-03","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2305.10994","title":"Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility","created":"2023-05-18","cited_by_count":13,"area":null},{"id":"2307.10430","title":"DP-TBART: A Transformer-based Autoregressive Model for Differentially Private Tabular Data Generation","created":"2023-07-19","cited_by_count":13,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2306.00127","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2410.03883","title":"DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction","created":"2024-10-04","cited_by_count":11,"area":null},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2111.13895","title":"Towards Understanding the Impact of Model Size on Differential Private Classification","created":"2021-11-27","cited_by_count":10,"area":null},{"id":"2202.10517","title":"Individualized PATE: Differentially Private Machine Learning with Individual Privacy Guarantees","created":"2022-02-21","cited_by_count":10,"area":null},{"id":"2203.09205","title":"SoK: Differential Privacy on Graph-Structured Data","created":"2022-03-17","cited_by_count":10,"area":null},{"id":"2306.03962","title":"PILLAR: How to make semi-private learning more effective","created":"2023-06-06","cited_by_count":10,"area":null},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2302.02910","title":"An Empirical Analysis of Fairness Notions under Differential Privacy","created":"2023-02-06","cited_by_count":9,"area":null}],"next_cursor":"100"}