{"total":54,"rows":[{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2212.01539","title":"Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping","created":"2022-12-03","cited_by_count":52,"area":null},{"id":"2302.09483","title":"Why Is Public Pretraining Necessary for Private Model Training?","created":"2023-02-19","cited_by_count":37,"area":null},{"id":"2312.04095","title":"Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection","created":"2023-12-07","cited_by_count":37,"area":"safety"},{"id":"2402.13659","title":"Privacy-Preserving Instructions for Aligning Large Language Models","created":"2024-02-21","cited_by_count":35,"area":"alignment"},{"id":"2304.13169","title":"SAFE: Machine Unlearning With Shard Graphs","created":"2023-04-25","cited_by_count":28,"area":"safety"},{"id":"2406.08431","title":"Diffusion Soup: Model Merging for Text-to-Image Diffusion Models","created":"2024-06-12","cited_by_count":26,"area":"diffusion"},{"id":"2403.18920","title":"CPR: Retrieval Augmented Generation for Copyright Protection","created":"2024-03-27","cited_by_count":24,"area":"rag"},{"id":"2305.13865","title":"Selective Pre-training for Private Fine-tuning","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2303.12247","title":"Exploring the Benefits of Visual Prompting in Differential Privacy","created":"2023-03-22","cited_by_count":17,"area":null},{"id":"2308.01937","title":"Training Data Protection with Compositional Diffusion Models","created":"2023-08-02","cited_by_count":17,"area":"diffusion"},{"id":"2503.12127","title":"Hyperbolic Safety-Aware Vision-Language Models","created":"2025-03-15","cited_by_count":17,"area":"mllm"},{"id":"2303.01256","title":"Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distance","created":"2023-03-02","cited_by_count":16,"area":null},{"id":"2306.01181","title":"TMI! Finetuned Models Leak Private Information from their Pretraining Data","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2407.13621","title":"Differential Privacy Mechanisms in Neural Tangent Kernel Regression","created":"2024-07-18","cited_by_count":14,"area":null},{"id":"2407.14717","title":"Provable Differentially Private Computation of the Cross-Attention Mechanism","created":"2024-07-20","cited_by_count":14,"area":"diffusion"},{"id":"2305.10994","title":"Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility","created":"2023-05-18","cited_by_count":13,"area":null},{"id":"2307.08122","title":"Tangent Transformers for Composition, Privacy and Removal","created":"2023-07-16","cited_by_count":13,"area":null},{"id":"2302.01190","title":"On the Efficacy of Differentially Private Few-shot Image Classification","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2311.16254","title":"Safe-CLIP: Removing NSFW Concepts from Vision-and-Language Models","created":"2023-11-27","cited_by_count":12,"area":null},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2304.03545","title":"AI Model Disgorgement: Methods and Choices","created":"2023-04-07","cited_by_count":9,"area":null},{"id":"2402.18752","title":"Pre-training Differentially Private Models with Limited Public Data","created":"2024-02-28","cited_by_count":8,"area":null},{"id":"2405.14517","title":"TUNI: A Textual Unimodal Detector for Identity Inference in CLIP Models","created":"2024-05-23","cited_by_count":8,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2310.19215","title":"On the accuracy and efficiency of group-wise clipping in differentially private optimization","created":"2023-10-30","cited_by_count":7,"area":null},{"id":"2310.15454","title":"Private Learning with Public Features","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2402.09483","title":"Oracle-Efficient Differentially Private Learning with Public Data","created":"2024-02-13","cited_by_count":6,"area":null},{"id":"2503.22988","title":"DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimation","created":"2025-03-29","cited_by_count":6,"area":null},{"id":"2312.15551","title":"On the Benefits of Public Representations for Private Transfer Learning under Distribution Shift","created":"2023-12-24","cited_by_count":5,"area":null},{"id":"2405.17529","title":"Clip Body and Tail Separately: High Probability Guarantees for DPSGD with Heavy Tails","created":"2024-05-27","cited_by_count":5,"area":null},{"id":"2301.13104","title":"Equivariant Differentially Private Deep Learning: Why DP-SGD Needs Sparser Models","created":"2023-01-30","cited_by_count":4,"area":null},{"id":"2309.11516","title":"Private Matrix Factorization with Public Item Features","created":"2023-09-17","cited_by_count":3,"area":null},{"id":"2310.01304","title":"Coupling public and private gradient provably helps optimization","created":"2023-10-02","cited_by_count":3,"area":null},{"id":"2305.17633","title":"DPFormer: Learning Differentially Private Transformer on Long-Tailed Data","created":"2023-05-28","cited_by_count":2,"area":null},{"id":"2312.03792","title":"PCDP-SGD: Improving the Convergence of Differentially Private SGD via Projection in Advance","created":"2023-12-06","cited_by_count":2,"area":null},{"id":"2603.03711","title":"LDP-Slicing: Local Differential Privacy for Images via Randomized Bit-Plane Slicing","created":"2026-03-04","cited_by_count":2,"area":null},{"id":"2211.07218","title":"SA-DPSGD: Differentially Private Stochastic Gradient Descent based on Simulated Annealing","created":"2022-11-14","cited_by_count":1,"area":null},{"id":"2402.06465","title":"On Differentially Private Subspace Estimation in a Distribution-Free Setting","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2404.08847","title":"LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models","created":"2024-04-12","cited_by_count":1,"area":null},{"id":"2504.10190","title":"Differentially Private 2D Human Pose Estimation","created":"2025-04-14","cited_by_count":1,"area":null},{"id":"2504.18147","title":"NoEsis: Differentially Private Knowledge Transfer in Modular LLM Adaptation","created":"2025-04-25","cited_by_count":1,"area":null},{"id":"2407.15414","title":"Weights Shuffling for Improving DPSGD in Transformer-based Models","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2507.17895","title":"Lower Bounds for Public-Private Learning under Distribution Shift","created":"2025-07-23","cited_by_count":0,"area":null},{"id":"2508.15141","title":"Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)","created":"2025-08-21","cited_by_count":0,"area":null},{"id":"2509.24896","title":"DAM: Dual Active Learning with Multimodal Foundation Model for Source-Free Domain Adaptation","created":"2025-09-29","cited_by_count":0,"area":null},{"id":"2602.22611","title":"Mitigating Membership Inference in Intermediate Representations with Differentially Private Training","created":"2026-02-26","cited_by_count":0,"area":"safety"},{"id":"2602.23516","title":"Lap2: Revisiting Laplace DP-SGD for High Dimensions via Majorization Theory","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.14222","title":"Membership Inference for Contrastive Pre-training Models with Text-only PII Queries","created":"2026-03-15","cited_by_count":0,"area":"safety"},{"id":"2603.24695","title":"Amplified Patch-Level Differential Privacy for Free via Random Cropping","created":"2026-03-25","cited_by_count":0,"area":null},{"id":"2610.02943","title":"Kinematics-Induced Multimodal 3D Human Pose Estimation with Subject-Level Privacy","created":"2026-10-02","cited_by_count":0,"area":null}],"next_cursor":null}