{"total":383,"rows":[{"id":"2110.05679","title":"Large Language Models Can Be Strong Differentially Private Learners","created":"2021-10-12","cited_by_count":412,"area":null},{"id":"2302.00539","title":"Analyzing Leakage of Personally Identifiable Information in Language Models","created":"2023-02-01","cited_by_count":285,"area":"safety"},{"id":"2201.09873","title":"Transformers in Medical Imaging: A Survey","created":"2022-01-24","cited_by_count":245,"area":null},{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2403.12313","title":"Improving LoRA in Privacy-preserving Federated Learning","created":"2024-03-18","cited_by_count":161,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2210.04620","title":"FLamby: Datasets and Benchmarks for Cross-Silo Federated Learning in Realistic Healthcare Settings","created":"2022-10-10","cited_by_count":125,"area":null},{"id":"2210.09929","title":"Differentially Private Diffusion Models","created":"2022-10-18","cited_by_count":119,"area":"diffusion"},{"id":"2210.14348","title":"Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipe","created":"2022-10-25","cited_by_count":108,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2309.06746","title":"DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass","created":"2023-09-13","cited_by_count":67,"area":"safety"},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2305.15560","title":"Differentially Private Synthetic Data via Foundation Model APIs 1: Images","created":"2023-05-24","cited_by_count":65,"area":null},{"id":"2205.13710","title":"Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Loss","created":"2022-05-27","cited_by_count":61,"area":null},{"id":"2210.03403","title":"TAN Without a Burn: Scaling Laws of DP-SGD","created":"2022-10-07","cited_by_count":52,"area":null},{"id":"2212.01539","title":"Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping","created":"2022-12-03","cited_by_count":52,"area":null},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2205.10683","title":"Scalable and Efficient Training of Large Convolutional Neural Networks with Differential Privacy","created":"2022-05-21","cited_by_count":48,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2203.00949","title":"GAP: Differentially Private Graph Neural Networks with Aggregation Perturbation","created":"2022-03-02","cited_by_count":46,"area":null},{"id":"2301.09956","title":"Membership Inference of Diffusion Models","created":"2023-01-24","cited_by_count":46,"area":"diffusion"},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2211.04446","title":"Private Set Generation with Discriminative Information","created":"2022-11-07","cited_by_count":34,"area":null},{"id":"2202.07178","title":"Federated Learning with Sparsified Model Perturbation: Improving Accuracy under Client-Level Differential Privacy","created":"2022-02-15","cited_by_count":33,"area":null},{"id":"2303.11242","title":"Make Landscape Flatter in Differentially Private Federated Learning","created":"2023-03-20","cited_by_count":33,"area":null},{"id":"2202.07623","title":"Defending against Reconstruction Attacks with R\\'enyi Differential Privacy","created":"2022-02-15","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2305.15759","title":"DP-LDMs: Differentially Private Latent Diffusion Models","created":"2023-05-25","cited_by_count":29,"area":"diffusion"},{"id":"2406.02958","title":"PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs","created":"2024-06-05","cited_by_count":29,"area":null},{"id":"2312.14334","title":"DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)","created":"2023-12-21","cited_by_count":28,"area":null},{"id":"2203.00324","title":"Differentially private training of residual networks with scale normalisation","created":"2022-03-01","cited_by_count":26,"area":null},{"id":"2210.08643","title":"A General Framework for Auditing Differentially Private Machine Learning","created":"2022-10-16","cited_by_count":25,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2302.04787","title":"On the Privacy-Robustness-Utility Trilemma in Distributed Learning","created":"2023-02-09","cited_by_count":24,"area":null},{"id":"2203.09137","title":"Global Convergence of MAML and Theory-Inspired Neural Architecture Search for Few-Shot Learning","created":"2022-03-17","cited_by_count":22,"area":null},{"id":"2403.15638","title":"Differentially Private Next-Token Prediction of Large Language Models","created":"2024-03-22","cited_by_count":22,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22,"area":null},{"id":"2212.00328","title":"Differentially Private Learning with Per-Sample Adaptive Clipping","created":"2022-12-01","cited_by_count":21,"area":null},{"id":"2301.01824","title":"Privacy and Efficiency of Communications in Federated Split Learning","created":"2023-01-04","cited_by_count":21,"area":null},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2209.15596","title":"Individual Privacy Accounting with Gaussian Differential Privacy","created":"2022-09-30","cited_by_count":20,"area":null},{"id":"2406.01355","title":"Differentially Private Fine-Tuning of Diffusion Models","created":"2024-06-03","cited_by_count":20,"area":"diffusion"},{"id":"2412.09119","title":"The Utility and Complexity of in- and out-of-Distribution Machine Unlearning","created":"2024-12-12","cited_by_count":20,"area":"safety"},{"id":"2201.11980","title":"Differential Privacy Guarantees for Stochastic Gradient Langevin Dynamics","created":"2022-01-28","cited_by_count":19,"area":null},{"id":"2206.10713","title":"Beyond Uniform Lipschitz Condition in Differentially Private Optimization","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2302.14517","title":"Arbitrary Decisions are a Hidden Cost of Differentially Private Training","created":"2023-02-28","cited_by_count":19,"area":null},{"id":"2306.06076","title":"Differentially Private Image Classification by Learning Priors from Random Processes","created":"2023-06-08","cited_by_count":19,"area":null},{"id":"2206.03985","title":"How unfair is private learning ?","created":"2022-06-08","cited_by_count":18,"area":null},{"id":"2403.00932","title":"Differentially Private Knowledge Distillation via Synthetic Text Generation","created":"2024-03-01","cited_by_count":18,"area":"distill"},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2502.14921","title":"The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text","created":"2025-02-19","cited_by_count":18,"area":"synth"},{"id":"2302.01622","title":"Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging","created":"2023-02-03","cited_by_count":17,"area":null},{"id":"2302.02936","title":"Private GANs, Revisited","created":"2023-02-06","cited_by_count":17,"area":null},{"id":"2306.08842","title":"ViP: A Differentially Private Foundation Model for Computer Vision","created":"2023-06-15","cited_by_count":17,"area":null},{"id":"2402.09477","title":"PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining","created":"2024-02-12","cited_by_count":17,"area":"safety"},{"id":"2406.01457","title":"Differentially Private Tabular Data Synthesis using Large Language Models","created":"2024-06-03","cited_by_count":16,"area":"synth"},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2203.05222","title":"Similarity-based Label Inference Attack against Training and Inference of Split Learning","created":"2022-03-10","cited_by_count":15,"area":null},{"id":"2212.06074","title":"Regression with Label Differential Privacy","created":"2022-12-12","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2306.05651","title":"Differentially Private Sharpness-Aware Training","created":"2023-06-09","cited_by_count":14,"area":null},{"id":"2403.17105","title":"Certified Machine Unlearning via Noisy Stochastic Gradient Descent","created":"2024-03-25","cited_by_count":14,"area":"safety"},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2504.16438","title":"POPri: Private Federated Learning using Preference-Optimized Synthetic Data","created":"2025-04-23","cited_by_count":14,"area":"alignment"},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2302.01190","title":"On the Efficacy of Differentially Private Few-shot Image Classification","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2302.09042","title":"Privately Customizing Prefinetuning to Better Match User Data in Federated Learning","created":"2023-02-17","cited_by_count":12,"area":null},{"id":"2304.08928","title":"ProGAP: Progressive Graph Neural Networks with Differential Privacy Guarantees","created":"2023-04-18","cited_by_count":12,"area":null},{"id":"2307.06422","title":"Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection","created":"2023-07-12","cited_by_count":12,"area":null},{"id":"2405.13763","title":"Banded Square Root Matrix Factorization for Differentially Private Model Training","created":"2024-05-22","cited_by_count":12,"area":null},{"id":"2410.13097","title":"Communication-Efficient and Tensorized Federated Fine-Tuning of Large Language Models","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2204.03230","title":"What You See is What You Get: Principled Deep Learning via Distributional Generalization","created":"2022-04-07","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2212.04486","title":"A New Linear Scaling Rule for Private Adaptive Hyperparameter Optimization","created":"2022-12-08","cited_by_count":11,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2402.03990","title":"Subsampling is not Magic: Why Large Batch Sizes Work for Differentially Private Stochastic Optimisation","created":"2024-02-06","cited_by_count":11,"area":null},{"id":"2410.05725","title":"KnowledgeSG: Privacy-Preserving Synthetic Text Generation with Knowledge Distillation from Server","created":"2024-10-08","cited_by_count":11,"area":"distill"},{"id":"2505.12805","title":"FedSVD: Adaptive Orthogonalization for Private Federated Learning with LoRA","created":"2025-05-19","cited_by_count":11,"area":null},{"id":"2211.02956","title":"Privacy-Preserving Models for Legal Natural Language Processing","created":"2022-11-05","cited_by_count":10,"area":null},{"id":"2305.09903","title":"Privacy Loss of Noisy Stochastic Gradient Descent Might Converge Even for Non-Convex Losses","created":"2023-05-17","cited_by_count":10,"area":null},{"id":"2306.03962","title":"PILLAR: How to make semi-private learning more effective","created":"2023-06-06","cited_by_count":10,"area":null},{"id":"2402.18726","title":"Unveiling Privacy, Memorization, and Input Curvature Links","created":"2024-02-28","cited_by_count":10,"area":null},{"id":"2410.22971","title":"Private Synthetic Text Generation with Diffusion Models","created":"2024-10-30","cited_by_count":10,"area":"diffusion"},{"id":"2502.15436","title":"Fed-SB: A Silver Bullet for Extreme Communication Efficiency and Performance in (Private) Federated LoRA Fine-Tuning","created":"2025-02-21","cited_by_count":10,"area":null},{"id":"2301.09109","title":"Federated Recommendation with Additive Personalization","created":"2023-01-22","cited_by_count":9,"area":null},{"id":"2302.02910","title":"An Empirical Analysis of Fairness Notions under Differential Privacy","created":"2023-02-06","cited_by_count":9,"area":null}],"next_cursor":"100"}