{"total":25,"rows":[{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2210.17546","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","created":"2022-10-31","cited_by_count":100,"area":null},{"id":"2410.19482","title":"Measuring memorization in language models via probabilistic extraction","created":"2024-10-25","cited_by_count":41,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2406.17746","title":"Recite, Reconstruct, Recollect: Memorization in LMs as a Multifaceted Phenomenon","created":"2024-06-25","cited_by_count":31,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2305.05973","title":"Synthetic Query Generation for Privacy-Preserving Deep Retrieval Systems using Differentially Private Language Models","created":"2023-05-10","cited_by_count":10,"area":null},{"id":"2405.15523","title":"The Mosaic Memory of Large Language Models","created":"2024-05-24","cited_by_count":10,"area":null},{"id":"2210.02910","title":"Federated Boosted Decision Trees with Differential Privacy","created":"2022-10-06","cited_by_count":9,"area":null},{"id":"2203.00481","title":"Beyond Gradients: Exploiting Adversarial Priors in Model Inversion Attacks","created":"2022-03-01","cited_by_count":7,"area":null},{"id":"2211.03942","title":"Privacy-Aware Compression for Federated Learning Through Numerical Mechanism Design","created":"2022-11-08","cited_by_count":6,"area":null},{"id":"2306.00133","title":"A Note On Interpreting Canary Exposure","created":"2023-05-31","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2402.09478","title":"Data Reconstruction Attacks and Defenses: A Systematic Evaluation","created":"2024-02-13","cited_by_count":6,"area":null},{"id":"2212.08619","title":"Planting and Mitigating Memorized Content in Predictive-Text Language Models","created":"2022-12-16","cited_by_count":1,"area":null},{"id":"2311.03075","title":"SoK: Memorisation in machine learning","created":"2023-11-06","cited_by_count":1,"area":null},{"id":"2312.04590","title":"Reconciling AI Performance and Data Reconstruction Resilience for Medical Imaging","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2404.02696","title":"Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition","created":"2024-04-03","cited_by_count":1,"area":null},{"id":"2303.16372","title":"On the Query Complexity of Training Data Reconstruction in Private Learning","created":"2023-03-29","cited_by_count":0,"area":null},{"id":"2411.03746","title":"Optimal Defenses Against Gradient Reconstruction Attacks","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2502.05307","title":"Training Set Reconstruction from Differentially Private Forests: How Effective is DP?","created":"2025-02-07","cited_by_count":0,"area":null},{"id":"2504.18497","title":"DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics","created":"2025-04-25","cited_by_count":0,"area":null},{"id":"2609.37344","title":"A Sharp Transition in Data Reconstruction under Differential Privacy","created":"2026-09-29","cited_by_count":0,"area":null}],"next_cursor":null}