{"total":81,"rows":[{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2207.04380","title":"Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributions","created":"2022-07-10","cited_by_count":52,"area":null},{"id":"2210.00597","title":"Composition of Differential Privacy & Privacy Amplification by Subsampling","created":"2022-10-02","cited_by_count":45,"area":null},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2111.00173","title":"Dynamic Differential-Privacy Preserving SGD","created":"2021-10-30","cited_by_count":30,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2407.07737","title":"Fine-Tuning Large Language Models with User-Level Differential Privacy","created":"2024-07-10","cited_by_count":29,"area":null},{"id":"2203.13789","title":"FLUTE: A Scalable, Extensible Framework for High-Performance Federated Learning Simulations","created":"2022-03-25","cited_by_count":27,"area":null},{"id":"2203.05481","title":"Fully Adaptive Composition in Differential Privacy","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2209.15596","title":"Individual Privacy Accounting with Gaussian Differential Privacy","created":"2022-09-30","cited_by_count":20,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2310.15526","title":"Privacy Amplification for Matrix Mechanisms","created":"2023-10-24","cited_by_count":17,"area":null},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2207.04381","title":"Faster Privacy Accounting via Evolving Discretization","created":"2022-07-10","cited_by_count":15,"area":null},{"id":"2307.03928","title":"Bounding data reconstruction attacks with the hypothesis testing interpretation of differential privacy","created":"2023-07-08","cited_by_count":15,"area":null},{"id":"2502.08202","title":"Privacy amplification by random allocation","created":"2025-02-12","cited_by_count":15,"area":null},{"id":"2206.04236","title":"Edgeworth Accountant: An Analytical Approach to Differential Privacy Composition","created":"2022-06-09","cited_by_count":14,"area":null},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2401.00583","title":"Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learners","created":"2023-12-31","cited_by_count":12,"area":null},{"id":"2304.07927","title":"A Randomized Approach for Tight Privacy Accounting","created":"2023-04-17","cited_by_count":11,"area":null},{"id":"2402.03990","title":"Subsampling is not Magic: Why Large Batch Sizes Work for Differentially Private Stochastic Optimisation","created":"2024-02-06","cited_by_count":11,"area":null},{"id":"2210.06140","title":"Differentially Private Bootstrap: New Privacy Analysis and Inference Strategies","created":"2022-10-12","cited_by_count":10,"area":null},{"id":"2305.09903","title":"Privacy Loss of Noisy Stochastic Gradient Descent Might Converge Even for Non-Convex Losses","created":"2023-05-17","cited_by_count":10,"area":null},{"id":"2301.13273","title":"Near Optimal Private and Robust Linear Regression","created":"2023-01-30","cited_by_count":9,"area":null},{"id":"2406.08918","title":"Beyond the Calibration Point: Mechanism Comparison in Differential Privacy","created":"2024-06-13","cited_by_count":9,"area":null},{"id":"2405.08920","title":"Neural Collapse Meets Differential Privacy: Curious Behaviors of NoisyGD with Near-perfect Representation Learning","created":"2024-05-14","cited_by_count":8,"area":null},{"id":"2407.02191","title":"Attack-Aware Noise Calibration for Differential Privacy","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2408.10456","title":"Differentially Private Stochastic Gradient Descent with Fixed-Size Minibatches: Tighter RDP Guarantees with or without Replacement","created":"2024-08-19","cited_by_count":8,"area":null},{"id":"2409.09558","title":"A Statistical Viewpoint on Differential Privacy: Hypothesis Testing, Representation and Blackwell's Theorem","created":"2024-09-14","cited_by_count":8,"area":null},{"id":"2106.10761","title":"Generalization in the Face of Adaptivity: A Bayesian Perspective","created":"2021-06-20","cited_by_count":7,"area":null},{"id":"2112.14430","title":"DP-FP: Differentially Private Forward Propagation for Large Models","created":"2021-12-29","cited_by_count":7,"area":null},{"id":"2310.19215","title":"On the accuracy and efficiency of group-wise clipping in differentially private optimization","created":"2023-10-30","cited_by_count":7,"area":null},{"id":"2311.11822","title":"Zero redundancy distributed learning with differential privacy","created":"2023-11-20","cited_by_count":7,"area":null},{"id":"2107.08461","title":"Differentially Private Bayesian Neural Networks on Accuracy, Privacy and Reliability","created":"2021-07-18","cited_by_count":6,"area":null},{"id":"2406.04827","title":"Auditing Differential Privacy Guarantees Using Density Estimation","created":"2024-06-07","cited_by_count":6,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null},{"id":"2503.10945","title":"Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning","created":"2025-03-13","cited_by_count":6,"area":null},{"id":"2208.09595","title":"The Saddle-Point Accountant for Differential Privacy","created":"2022-08-20","cited_by_count":5,"area":null},{"id":"2311.08357","title":"Sparsity-Preserving Differentially Private Training of Large Embedding Models","created":"2023-11-14","cited_by_count":5,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2206.09569","title":"Shuffle Gaussian Mechanism for Differential Privacy","created":"2022-06-20","cited_by_count":4,"area":null},{"id":"2207.00420","title":"Cactus Mechanisms: Optimal Differential Privacy Mechanisms in the Large-Composition Regime","created":"2022-06-25","cited_by_count":4,"area":null},{"id":"2310.14661","title":"Tractable MCMC for Private Learning with Pure and Gaussian Differential Privacy","created":"2023-10-23","cited_by_count":4,"area":null},{"id":"2410.09296","title":"The 2020 US Decennial Census is more private than you (might) think","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2601.10237","title":"Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD","created":"2026-01-15","cited_by_count":4,"area":null},{"id":"2503.12314","title":"Empirical Privacy Variance","created":"2025-03-16","cited_by_count":3,"area":null},{"id":"2510.19934","title":"Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via $f$-Differential Privacy","created":"2025-10-22","cited_by_count":3,"area":null},{"id":"2510.23931","title":"Differential Privacy: Gradient Leakage Attacks in Federated Learning Environments","created":"2025-10-27","cited_by_count":3,"area":null},{"id":"2601.21636","title":"Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocation","created":"2026-01-29","cited_by_count":3,"area":null},{"id":"2601.22334","title":"DP-{\\lambda}CGD: Efficient Noise Correlation for Differentially Private Model Training","created":"2026-01-29","cited_by_count":3,"area":null},{"id":"2602.17284","title":"Efficient privacy loss accounting for subsampling and random allocation","created":"2026-02-19","cited_by_count":3,"area":null},{"id":"2303.04676","title":"Considerations on the Theory of Training Models with Differential Privacy","created":"2023-03-08","cited_by_count":2,"area":null},{"id":"2401.10294","title":"Tight Group-Level DP Guarantees for DP-SGD with Sampling via Mixture of Gaussians Mechanisms","created":"2024-01-17","cited_by_count":2,"area":null},{"id":"2402.06701","title":"Privacy Profiles for Private Selection","created":"2024-02-09","cited_by_count":2,"area":null},{"id":"2407.04884","title":"Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacy","created":"2024-07-05","cited_by_count":2,"area":null},{"id":"2505.05816","title":"On the Price of Differential Privacy for Spectral Clustering over Stochastic Block Models","created":"2025-05-09","cited_by_count":2,"area":null},{"id":"2505.19969","title":"Differential Privacy Analysis of Decentralized Gossip Averaging under Varying Threat Models","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2506.19836","title":"Machine Learning with Privacy for Protected Attributes","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2109.10528","title":"A unified interpretation of the Gaussian mechanism for differential privacy through the sensitivity index","created":"2021-09-22","cited_by_count":1,"area":null},{"id":"2212.05796","title":"Generalizing DP-SGD with Shuffling and Batch Clipping","created":"2022-12-12","cited_by_count":1,"area":null},{"id":"2407.14710","title":"Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergence","created":"2024-07-20","cited_by_count":1,"area":null},{"id":"2407.19286","title":"On Using Secure Aggregation in Differentially Private Federated Learning with Multiple Local Steps","created":"2024-07-27","cited_by_count":1,"area":null},{"id":"2503.11897","title":"PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectors","created":"2025-03-14","cited_by_count":1,"area":null},{"id":"2510.01447","title":"SoftAdaClip: A Smooth Clipping Strategy for Fair and Private Model Training","created":"2025-10-01","cited_by_count":1,"area":null},{"id":"2210.13028","title":"Generalised Likelihood Ratio Testing Adversaries through the Differential Privacy Lens","created":"2022-10-24","cited_by_count":0,"area":null},{"id":"2405.18776","title":"LMO-DP: Optimizing the Randomization Mechanism for Differentially Private Fine-Tuning (Large) Language Models","created":"2024-05-29","cited_by_count":0,"area":null},{"id":"2510.07136","title":"Differentially Private Spectral Graph Clustering: Balancing Privacy, Accuracy, and Efficiency","created":"2025-10-08","cited_by_count":0,"area":null},{"id":"2601.09166","title":"DP-FedSOFIM: Differentially Private Federated Stochastic Optimization using Regularized Fisher Information Matrix","created":"2026-01-14","cited_by_count":0,"area":null},{"id":"2603.24695","title":"Amplified Patch-Level Differential Privacy for Free via Random Cropping","created":"2026-03-25","cited_by_count":0,"area":null},{"id":"2605.21780","title":"Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2606.29835","title":"A Sieve-Accelerated Quadrature Method for Exact Privacy Accounting in the 2020 U.S. Decennial Census","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2607.06320","title":"Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacy","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2607.09441","title":"Near-optimal node-private community estimation in polynomial-time","created":"2026-07-10","cited_by_count":0,"area":null},{"id":"2610.13768","title":"From Pixels to Privacy-Sensitive Features: An Information-Theoretic Framework for Reconstruction Bounds","created":"2026-10-09","cited_by_count":0,"area":null},{"id":"2610.17120","title":"Can R\\'enyi Accountants Beat Lossless Accountants for DP-SGD?","created":"2026-10-12","cited_by_count":0,"area":null},{"id":"2610.17249","title":"Tight End-to-End Accounting for Differentially Private Synthetic Data","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}