{"total":117,"rows":[{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2302.10870","title":"On Provable Copyright Protection for Generative Models","created":"2023-02-21","cited_by_count":98,"area":null},{"id":"2102.08504","title":"Label Leakage and Protection in Two-party Split Learning","created":"2021-02-17","cited_by_count":90,"area":null},{"id":"2309.06746","title":"DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass","created":"2023-09-13","cited_by_count":67,"area":"safety"},{"id":"2106.03408","title":"Antipodes of Label Differential Privacy: PATE and ALIBI","created":"2021-06-07","cited_by_count":52,"area":null},{"id":"2204.07667","title":"Just Fine-tune Twice: Selective Differential Privacy for Large Language Models","created":"2022-04-15","cited_by_count":32,"area":null},{"id":"2203.01451","title":"Label Leakage and Protection from Forward Embedding in Vertical Federated Learning","created":"2022-03-02","cited_by_count":27,"area":null},{"id":"2203.02073","title":"Differentially Private Label Protection in Split Learning","created":"2022-03-04","cited_by_count":26,"area":null},{"id":"2305.04701","title":"Differentially Private Attention Computation","created":"2023-05-08","cited_by_count":25,"area":null},{"id":"2110.02159","title":"Label differential privacy via clustering","created":"2021-10-05","cited_by_count":20,"area":null},{"id":"2206.03985","title":"How unfair is private learning ?","created":"2022-06-08","cited_by_count":18,"area":null},{"id":"2210.03175","title":"Weak Proxies are Sufficient and Preferable for Fairness with Missing Sensitive Attributes","created":"2022-10-06","cited_by_count":17,"area":null},{"id":"2212.00622","title":"Vertical Federated Learning: A Structured Literature Review","created":"2022-12-01","cited_by_count":17,"area":null},{"id":"2112.01299","title":"ExPLoit: Extracting Private Labels in Split Learning","created":"2021-11-25","cited_by_count":15,"area":null},{"id":"2203.05222","title":"Similarity-based Label Inference Attack against Training and Inference of Split Learning","created":"2022-03-10","cited_by_count":15,"area":null},{"id":"2212.06074","title":"Regression with Label Differential Privacy","created":"2022-12-12","cited_by_count":15,"area":null},{"id":"2502.17515","title":"Towards User-level Private Reinforcement Learning with Human Feedback","created":"2025-02-22","cited_by_count":14,"area":"alignment"},{"id":"2303.16270","title":"Communication-Efficient Vertical Federated Learning with Limited Overlapping Samples","created":"2023-03-28","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2311.13348","title":"MergeSFL: Split Federated Learning with Feature Merging and Batch Size Regulation","created":"2023-11-22","cited_by_count":13,"area":null},{"id":"2310.19733","title":"Differentially Private Reward Estimation with Preference Feedback","created":"2023-10-30","cited_by_count":12,"area":"alignment"},{"id":"2202.12968","title":"Does Label Differential Privacy Prevent Label Inference Attacks?","created":"2022-02-25","cited_by_count":11,"area":null},{"id":"2305.09557","title":"Learning from Aggregated Data: Curated Bags versus Random Bags","created":"2023-05-16","cited_by_count":11,"area":null},{"id":"2212.03462","title":"PADDLES: Phase-Amplitude Spectrum Disentangled Early Stopping for Learning with Noisy Labels","created":"2022-12-07","cited_by_count":10,"area":null},{"id":"2301.03566","title":"Simple Binary Hypothesis Testing under Local Differential Privacy and Communication Constraints","created":"2023-01-09","cited_by_count":10,"area":null},{"id":"2205.08886","title":"GeoPointGAN: Synthetic Spatial Data with Local Label Differential Privacy","created":"2022-05-18","cited_by_count":9,"area":null},{"id":"2306.15742","title":"Differentially Private Video Activity Recognition","created":"2023-06-27","cited_by_count":9,"area":null},{"id":"2405.16820","title":"Laboratory-Scale AI: Open-Weight Models are Competitive with ChatGPT Even in Low-Resource Settings","created":"2024-05-27","cited_by_count":9,"area":null},{"id":"2301.07284","title":"Label Inference Attack against Split Learning under Regression Setting","created":"2023-01-18","cited_by_count":8,"area":null},{"id":"2302.08155","title":"Learning From Biased Soft Labels","created":"2023-02-16","cited_by_count":8,"area":"distill"},{"id":"2310.09827","title":"VFLAIR: A Research Library and Benchmark for Vertical Federated Learning","created":"2023-10-15","cited_by_count":8,"area":null},{"id":"2505.15694","title":"A Unified Theoretical Analysis of Private and Robust Offline Alignment: from RLHF to DPO","created":"2025-05-21","cited_by_count":8,"area":"alignment"},{"id":"2204.10376","title":"Differentially Private Learning with Margin Guarantees","created":"2022-04-21","cited_by_count":7,"area":null},{"id":"2208.12294","title":"DPAUC: Differentially Private AUC Computation in Federated Learning","created":"2022-08-25","cited_by_count":7,"area":null},{"id":"2303.18178","title":"Robust and IP-Protecting Vertical Federated Learning against Unexpected Quitting of Parties","created":"2023-03-28","cited_by_count":7,"area":null},{"id":"2402.03688","title":"A Survey of Privacy Threats and Defense in Vertical Federated Learning: From Model Life Cycle Perspective","created":"2024-02-06","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2211.11896","title":"Private Ad Modeling with DP-SGD","created":"2022-11-21","cited_by_count":6,"area":null},{"id":"2307.10318","title":"Eliminating Label Leakage in Tree-Based Vertical Federated Learning","created":"2023-07-19","cited_by_count":6,"area":null},{"id":"2310.15454","title":"Private Learning with Public Features","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2312.05659","title":"Optimal Unbiased Randomizers for Regression with Label Differential Privacy","created":"2023-12-09","cited_by_count":6,"area":null},{"id":"2401.15246","title":"Training Differentially Private Ad Prediction Models with Semi-Sensitive Features","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2310.05696","title":"Little is Enough: Boosting Privacy by Sharing Only Hard Labels in Federated Semi-Supervised Learning","created":"2023-10-09","cited_by_count":5,"area":null},{"id":"2405.04032","title":"Locally Differentially Private In-Context Learning","created":"2024-05-07","cited_by_count":5,"area":null},{"id":"2406.07314","title":"Rethinking the impact of noisy labels in graph classification: A utility and privacy perspective","created":"2024-06-11","cited_by_count":5,"area":null},{"id":"2406.11206","title":"Retraining with Predicted Hard Labels Provably Increases Model Accuracy","created":"2024-06-17","cited_by_count":5,"area":null},{"id":"2501.12749","title":"Conformal Prediction of Classifiers with Many Classes based on Noisy Labels","created":"2025-01-22","cited_by_count":5,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2206.03852","title":"FEL: High Capacity Learning for Recommendation and Ranking via Federated Ensemble Learning","created":"2022-06-07","cited_by_count":4,"area":null},{"id":"2305.11807","title":"On the Fairness Impacts of Private Ensembles Models","created":"2023-05-19","cited_by_count":4,"area":null},{"id":"2305.19424","title":"Quantifying Overfitting: Evaluating Neural Network Performance through Analysis of Null Space","created":"2023-05-30","cited_by_count":4,"area":null},{"id":"2306.07973","title":"PrivaScissors: Enhance the Privacy of Collaborative Inference through the Lens of Mutual Information","created":"2023-05-17","cited_by_count":4,"area":null},{"id":"2308.10422","title":"Split Unlearning","created":"2023-08-21","cited_by_count":4,"area":"safety"},{"id":"2312.07583","title":"Classification with Partially Private Features","created":"2023-12-11","cited_by_count":4,"area":null},{"id":"2510.13512","title":"Offline and Online KL-Regularized RLHF under Differential Privacy","created":"2025-10-15","cited_by_count":4,"area":"alignment"},{"id":"2205.12412","title":"Differentially Private AUC Computation in Vertical Federated Learning","created":"2022-05-24","cited_by_count":3,"area":null},{"id":"2305.12997","title":"Evaluating Privacy Leakage in Split Learning","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2405.13481","title":"Locally Private Estimation with Public Features","created":"2024-05-22","cited_by_count":3,"area":null},{"id":"2407.07054","title":"A Differentially Private Blockchain-Based Approach for Vertical Federated Learning","created":"2024-07-09","cited_by_count":3,"area":null},{"id":"2505.18407","title":"KL-regularization Itself is Differentially Private in Bandits and RLHF","created":"2025-05-23","cited_by_count":3,"area":"alignment"},{"id":"2603.22563","title":"Privacy-Preserving Reinforcement Learning from Human Feedback via Decoupled Reward Modeling","created":"2026-03-23","cited_by_count":3,"area":"alignment"},{"id":"2305.15165","title":"Personalized DP-SGD using Sampling Mechanisms","created":"2023-05-24","cited_by_count":2,"area":null},{"id":"2308.09448","title":"Defending Label Inference Attacks in Split Learning under Regression Setting","created":"2023-08-18","cited_by_count":2,"area":null},{"id":"2405.15150","title":"Enhancing Learning with Label Differential Privacy by Vector Approximation","created":"2024-05-24","cited_by_count":2,"area":null},{"id":"2406.02797","title":"Auditing Privacy Mechanisms via Label Inference Attacks","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2409.01661","title":"$S^2$NeRF: Privacy-preserving Training Framework for NeRF","created":"2024-09-03","cited_by_count":2,"area":null},{"id":"2410.18404","title":"Enhancing Feature-Specific Data Protection via Bayesian Coordinate Differential Privacy","created":"2024-10-24","cited_by_count":2,"area":null},{"id":"2505.15721","title":"Privacy-Preserving Conformal Prediction Under Local Differential Privacy","created":"2025-05-21","cited_by_count":2,"area":null},{"id":"2506.05101","title":"Privacy Amplification Through Synthetic Data: Insights from Linear Regression","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2506.19836","title":"Machine Learning with Privacy for Protected Attributes","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2506.22342","title":"Improving Epidemic Analyses with Privacy-Preserving Integration of Sensitive Data","created":"2025-06-27","cited_by_count":2,"area":null},{"id":"2207.10240","title":"Differentially Private Partial Set Cover with Applications to Facility Location","created":"2022-07-21","cited_by_count":1,"area":null},{"id":"2305.15394","title":"Differentially-Private Decision Trees and Provable Robustness to Data Poisoning","created":"2023-05-24","cited_by_count":1,"area":"safety"},{"id":"2308.02465","title":"Label Inference Attacks against Node-level Vertical Federated GNNs","created":"2023-08-04","cited_by_count":1,"area":null},{"id":"2310.10092","title":"Label Differential Privacy via Aggregation","created":"2023-10-16","cited_by_count":1,"area":null},{"id":"2311.06227","title":"Does Differential Privacy Prevent Backdoor Attacks in Practice?","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2405.17042","title":"LabObf: A Label Protection Scheme for Vertical Federated Learning Through Label Obfuscation","created":"2024-05-27","cited_by_count":1,"area":null},{"id":"2406.12205","title":"On the Exponential Convergence for Offline RLHF with Pairwise Comparisons","created":"2024-06-18","cited_by_count":1,"area":"alignment"},{"id":"2406.19040","title":"On Convex Optimization with Semi-Sensitive Features","created":"2024-06-27","cited_by_count":1,"area":null},{"id":"2412.11689","title":"Just a Simple Transformation is Enough for Data Protection in Vertical Federated Learning","created":"2024-12-16","cited_by_count":1,"area":null},{"id":"2502.14309","title":"On Theoretical Limits of Learning with Label Differential Privacy","created":"2025-02-20","cited_by_count":1,"area":null},{"id":"2505.14959","title":"Privacy Preserving Conversion Modeling in Data Clean Room","created":"2025-05-20","cited_by_count":1,"area":null},{"id":"2505.15140","title":"EC-LDA : Label Distribution Inference Attack against Federated Graph Learning with Embedding Compression","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2505.22703","title":"Private Rate-Constrained Optimization with Applications to Fair Learning","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2508.06783","title":"PROPS: Progressively Private Self-alignment of Large Language Models","created":"2025-08-09","cited_by_count":1,"area":"alignment"},{"id":"2509.23246","title":"Adaptive Token-Weighted Differential Privacy for LLMs: Not All Tokens Require Equal Protection","created":"2025-09-27","cited_by_count":1,"area":null},{"id":"2601.22625","title":"RPWithPrior: Label Differential Privacy in Regression","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2605.30808","title":"Differentially Private Preference Data Synthesis for Large Language Model Alignment","created":"2026-05-29","cited_by_count":1,"area":"alignment"},{"id":"2105.08876","title":"A Lightweight Privacy-Preserving Scheme Using Label-based Pixel Block Mixing for Image Classification in Deep Learning","created":"2021-05-19","cited_by_count":0,"area":null},{"id":"2303.04195","title":"PRIMO: Private Regression in Multiple Outcomes","created":"2023-03-07","cited_by_count":0,"area":null},{"id":"2305.07815","title":"MetaMorphosis: Task-oriented Privacy Cognizant Feature Generation for Multi-task Learning","created":"2023-05-13","cited_by_count":0,"area":null},{"id":"2305.10662","title":"Private Gradient Estimation is Useful for Generative Modeling","created":"2023-05-18","cited_by_count":0,"area":null},{"id":"2402.00315","title":"Online Distribution Learning with Local Private Constraints","created":"2024-02-01","cited_by_count":0,"area":null},{"id":"2403.15839","title":"TablePuppet: A Generic Framework for Relational Federated Learning","created":"2024-03-23","cited_by_count":0,"area":null},{"id":"2406.01085","title":"FedAdOb: Privacy-Preserving Federated Deep Learning with Adaptive Obfuscation","created":"2024-06-03","cited_by_count":0,"area":null},{"id":"2409.12384","title":"Privacy-Preserving Student Learning with Differentially Private Data-Free Distillation","created":"2024-09-19","cited_by_count":0,"area":null},{"id":"2411.18746","title":"Inference Privacy: Properties and Mechanisms","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2411.19045","title":"Aggregating Data for Optimal and Private Learning","created":"2024-11-28","cited_by_count":0,"area":null},{"id":"2501.15163","title":"The Exploration of Error Bounds in Classification with Noisy Labels","created":"2025-01-25","cited_by_count":0,"area":null}],"next_cursor":"100"}