{"total":26,"rows":[{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2211.06550","title":"TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Data","created":"2022-11-12","cited_by_count":57,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21,"area":null},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20,"area":null},{"id":"2406.13985","title":"The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging","created":"2024-06-20","cited_by_count":13,"area":null},{"id":"2307.00310","title":"Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD","created":"2023-07-01","cited_by_count":11,"area":null},{"id":"2410.06186","title":"The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD","created":"2024-10-08","cited_by_count":11,"area":null},{"id":"2503.07199","title":"How Well Can Differential Privacy Be Audited in One Run?","created":"2025-03-10","cited_by_count":9,"area":null},{"id":"2306.00133","title":"A Note On Interpreting Canary Exposure","created":"2023-05-31","cited_by_count":6,"area":null},{"id":"2406.04827","title":"Auditing Differential Privacy Guarantees Using Density Estimation","created":"2024-06-07","cited_by_count":6,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null},{"id":"2402.13087","title":"Revisiting Differentially Private Hyper-parameter Tuning","created":"2024-02-20","cited_by_count":5,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2402.14397","title":"Closed-Form Bounds for DP-SGD against Record-level Inference","created":"2024-02-22","cited_by_count":2,"area":null},{"id":"2604.18352","title":"Tight Auditing of Differential Privacy in MST and AIM","created":"2026-04-20","cited_by_count":1,"area":null},{"id":"2412.01756","title":"Adversarial Sample-Based Approach for Tighter Privacy Auditing in Final Model-Only Scenarios","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2510.09114","title":"On the Fairness of Privacy Protection: Measuring and Mitigating the Disparity of Group Privacy Risks for Differentially Private Machine Learning","created":"2025-10-10","cited_by_count":0,"area":null},{"id":"2511.14084","title":"Observational Auditing of Label Privacy","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2511.21804","title":"Beyond Membership: Limitations of Add/Remove Adjacency in Differential Privacy","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2606.04069","title":"Bayesian Membership Privacy for Graph Neural Networks","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.12733","title":"Let's Ask Gauss: Improved One-Run Privacy Auditing","created":"2026-06-10","cited_by_count":0,"area":null},{"id":"2610.17249","title":"Tight End-to-End Accounting for Differentially Private Synthetic Data","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}