{"total":224,"rows":[{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2210.09929","title":"Differentially Private Diffusion Models","created":"2022-10-18","cited_by_count":119,"area":"diffusion"},{"id":"2303.15715","title":"Foundation Models and Fair Use","created":"2023-03-28","cited_by_count":116,"area":null},{"id":"2210.14348","title":"Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipe","created":"2022-10-25","cited_by_count":108,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2212.06470","title":"Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining","created":"2022-12-13","cited_by_count":88,"area":null},{"id":"2302.13861","title":"Differentially Private Diffusion Models Generate Useful Synthetic Images","created":"2023-02-27","cited_by_count":86,"area":"diffusion"},{"id":"2305.18465","title":"Federated Learning of Gboard Language Models with Differential Privacy","created":"2023-05-29","cited_by_count":66,"area":null},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2305.15560","title":"Differentially Private Synthetic Data via Foundation Model APIs 1: Images","created":"2023-05-24","cited_by_count":65,"area":null},{"id":"2312.03724","title":"DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineer","created":"2023-11-27","cited_by_count":57,"area":null},{"id":"2210.03403","title":"TAN Without a Burn: Scaling Laws of DP-SGD","created":"2022-10-07","cited_by_count":52,"area":null},{"id":"2212.01539","title":"Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping","created":"2022-12-03","cited_by_count":52,"area":null},{"id":"2205.10683","title":"Scalable and Efficient Training of Large Convolutional Neural Networks with Differential Privacy","created":"2022-05-21","cited_by_count":48,"area":null},{"id":"2207.00160","title":"When Does Differentially Private Learning Not Suffer in High Dimensions?","created":"2022-07-01","cited_by_count":48,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2211.06530","title":"Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learning","created":"2022-11-12","cited_by_count":48,"area":null},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46,"area":"safety"},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2302.09483","title":"Why Is Public Pretraining Necessary for Private Model Training?","created":"2023-02-19","cited_by_count":37,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2402.13659","title":"Privacy-Preserving Instructions for Aligning Large Language Models","created":"2024-02-21","cited_by_count":35,"area":"alignment"},{"id":"2402.00751","title":"Fast Exact Unlearning for In-Context Learning Data for LLMs","created":"2024-02-01","cited_by_count":34,"area":"safety"},{"id":"2312.00050","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","created":"2023-11-27","cited_by_count":31,"area":"diffusion"},{"id":"2305.15759","title":"DP-LDMs: Differentially Private Latent Diffusion Models","created":"2023-05-25","cited_by_count":29,"area":"diffusion"},{"id":"2407.07737","title":"Fine-Tuning Large Language Models with User-Level Differential Privacy","created":"2024-07-10","cited_by_count":29,"area":null},{"id":"2406.05233","title":"Federated LoRA with Sparse Communication","created":"2024-06-07","cited_by_count":26,"area":null},{"id":"2209.14987","title":"No Free Lunch in \"Privacy for Free: How does Dataset Condensation Help Privacy\"","created":"2022-09-29","cited_by_count":23,"area":null},{"id":"2211.10844","title":"Learning to Generate Image Embeddings with User-level Differential Privacy","created":"2022-11-20","cited_by_count":23,"area":null},{"id":"2305.13865","title":"Selective Pre-training for Private Fine-tuning","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21,"area":null},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2406.01355","title":"Differentially Private Fine-Tuning of Diffusion Models","created":"2024-06-03","cited_by_count":20,"area":"diffusion"},{"id":"2206.10713","title":"Beyond Uniform Lipschitz Condition in Differentially Private Optimization","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2306.06076","title":"Differentially Private Image Classification by Learning Priors from Random Processes","created":"2023-06-08","cited_by_count":19,"area":null},{"id":"2212.00309","title":"Differentially Private Adaptive Optimization with Delayed Preconditioners","created":"2022-12-01","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2302.01622","title":"Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging","created":"2023-02-03","cited_by_count":17,"area":null},{"id":"2302.02936","title":"Private GANs, Revisited","created":"2023-02-06","cited_by_count":17,"area":null},{"id":"2303.12247","title":"Exploring the Benefits of Visual Prompting in Differential Privacy","created":"2023-03-22","cited_by_count":17,"area":null},{"id":"2306.08842","title":"ViP: A Differentially Private Foundation Model for Computer Vision","created":"2023-06-15","cited_by_count":17,"area":null},{"id":"2312.10108","title":"Privacy-Aware Document Visual Question Answering","created":"2023-12-15","cited_by_count":17,"area":null},{"id":"2303.01256","title":"Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distance","created":"2023-03-02","cited_by_count":16,"area":null},{"id":"2308.10888","title":"Unlocking Accuracy and Fairness in Differentially Private Image Classification","created":"2023-08-21","cited_by_count":16,"area":null},{"id":"2311.15792","title":"Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2210.02156","title":"Fine-Tuning with Differential Privacy Necessitates an Additional Hyperparameter Search","created":"2022-10-05","cited_by_count":15,"area":null},{"id":"2307.03928","title":"Bounding data reconstruction attacks with the hypothesis testing interpretation of differential privacy","created":"2023-07-08","cited_by_count":15,"area":null},{"id":"2311.14632","title":"Differentially Private SGD Without Clipping Bias: An Error-Feedback Approach","created":"2023-11-24","cited_by_count":14,"area":null},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2206.01838","title":"Differentially Private Model Compression","created":"2022-06-03","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2307.10430","title":"DP-TBART: A Transformer-based Autoregressive Model for Differentially Private Tabular Data Generation","created":"2023-07-19","cited_by_count":13,"area":null},{"id":"2309.05505","title":"Share Your Representation Only: Guaranteed Improvement of the Privacy-Utility Tradeoff in Federated Learning","created":"2023-09-11","cited_by_count":13,"area":null},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2302.01190","title":"On the Efficacy of Differentially Private Few-shot Image Classification","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2502.12976","title":"Does Training with Synthetic Data Truly Protect Privacy?","created":"2025-02-18","cited_by_count":12,"area":null},{"id":"2212.04486","title":"A New Linear Scaling Rule for Private Adaptive Hyperparameter Optimization","created":"2022-12-08","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2402.03990","title":"Subsampling is not Magic: Why Large Batch Sizes Work for Differentially Private Stochastic Optimisation","created":"2024-02-06","cited_by_count":11,"area":null},{"id":"2410.03883","title":"DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction","created":"2024-10-04","cited_by_count":11,"area":null},{"id":"2410.06186","title":"The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD","created":"2024-10-08","cited_by_count":11,"area":null},{"id":"2503.14681","title":"DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis","created":"2025-03-18","cited_by_count":11,"area":null},{"id":"2305.05973","title":"Synthetic Query Generation for Privacy-Preserving Deep Retrieval Systems using Differentially Private Language Models","created":"2023-05-10","cited_by_count":10,"area":null},{"id":"2306.03962","title":"PILLAR: How to make semi-private learning more effective","created":"2023-06-06","cited_by_count":10,"area":null},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2407.06496","title":"It's Our Loss: No Privacy Amplification for Hidden State DP-SGD With Non-Convex Loss","created":"2024-07-09","cited_by_count":10,"area":null},{"id":"2302.02910","title":"An Empirical Analysis of Fairness Notions under Differential Privacy","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2306.15056","title":"Optimal Differentially Private Model Training with Public Data","created":"2023-06-26","cited_by_count":9,"area":null},{"id":"2306.15742","title":"Differentially Private Video Activity Recognition","created":"2023-06-27","cited_by_count":9,"area":null},{"id":"2311.01295","title":"DP-Mix: Mixup-based Data Augmentation for Differentially Private Learning","created":"2023-11-02","cited_by_count":9,"area":null},{"id":"2403.08917","title":"Efficiently Computing Similarities to Private Datasets","created":"2024-03-13","cited_by_count":9,"area":null},{"id":"2406.08918","title":"Beyond the Calibration Point: Mechanism Comparison in Differential Privacy","created":"2024-06-13","cited_by_count":9,"area":null},{"id":"2402.18752","title":"Pre-training Differentially Private Models with Limited Public Data","created":"2024-02-28","cited_by_count":8,"area":null},{"id":"2405.08920","title":"Neural Collapse Meets Differential Privacy: Curious Behaviors of NoisyGD with Near-perfect Representation Learning","created":"2024-05-14","cited_by_count":8,"area":null},{"id":"2407.02191","title":"Attack-Aware Noise Calibration for Differential Privacy","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2408.13460","title":"DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise Reduction","created":"2024-08-24","cited_by_count":8,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2212.08930","title":"On Noisy Evaluation in Federated Hyperparameter Tuning","created":"2022-12-17","cited_by_count":7,"area":null},{"id":"2306.08173","title":"Safeguarding Data in Multimodal AI: A Differentially Private Approach to CLIP Training","created":"2023-06-13","cited_by_count":7,"area":null},{"id":"2310.19215","title":"On the accuracy and efficiency of group-wise clipping in differentially private optimization","created":"2023-10-30","cited_by_count":7,"area":null},{"id":"2311.11822","title":"Zero redundancy distributed learning with differential privacy","created":"2023-11-20","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2503.00703","title":"Towards hyperparameter-free optimization with differential privacy","created":"2025-03-02","cited_by_count":7,"area":null},{"id":"2506.00660","title":"Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications","created":"2025-05-31","cited_by_count":7,"area":null},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2211.11896","title":"Private Ad Modeling with DP-SGD","created":"2022-11-21","cited_by_count":6,"area":null},{"id":"2306.08656","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","created":"2023-06-14","cited_by_count":6,"area":null},{"id":"2307.12542","title":"Client-Level Differential Privacy via Adaptive Intermediary in Federated Medical Imaging","created":"2023-07-24","cited_by_count":6,"area":null},{"id":"2307.13231","title":"Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering","created":"2023-07-25","cited_by_count":6,"area":null},{"id":"2310.15454","title":"Private Learning with Public Features","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2312.05659","title":"Optimal Unbiased Randomizers for Regression with Label Differential Privacy","created":"2023-12-09","cited_by_count":6,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null}],"next_cursor":"100"}