{"total":51,"rows":[{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2407.07737","title":"Fine-Tuning Large Language Models with User-Level Differential Privacy","created":"2024-07-10","cited_by_count":29,"area":null},{"id":"2406.14322","title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning","created":"2024-06-20","cited_by_count":24,"area":null},{"id":"2211.10844","title":"Learning to Generate Image Embeddings with User-level Differential Privacy","created":"2022-11-20","cited_by_count":23,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2308.10888","title":"Unlocking Accuracy and Fairness in Differentially Private Image Classification","created":"2023-08-21","cited_by_count":16,"area":null},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2510.15001","title":"VaultGemma: A Differentially Private Gemma Model","created":"2025-10-15","cited_by_count":16,"area":null},{"id":"2307.03928","title":"Bounding data reconstruction attacks with the hypothesis testing interpretation of differential privacy","created":"2023-07-08","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2304.07927","title":"A Randomized Approach for Tight Privacy Accounting","created":"2023-04-17","cited_by_count":11,"area":null},{"id":"2402.03990","title":"Subsampling is not Magic: Why Large Batch Sizes Work for Differentially Private Stochastic Optimisation","created":"2024-02-06","cited_by_count":11,"area":null},{"id":"2406.08918","title":"Beyond the Calibration Point: Mechanism Comparison in Differential Privacy","created":"2024-06-13","cited_by_count":9,"area":null},{"id":"2408.08868","title":"A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTs","created":"2024-08-16","cited_by_count":9,"area":null},{"id":"2404.06430","title":"pfl-research: simulation framework for accelerating research in Private Federated Learning","created":"2024-04-09","cited_by_count":8,"area":null},{"id":"2407.02191","title":"Attack-Aware Noise Calibration for Differential Privacy","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2211.11896","title":"Private Ad Modeling with DP-SGD","created":"2022-11-21","cited_by_count":6,"area":null},{"id":"2406.04827","title":"Auditing Differential Privacy Guarantees Using Density Estimation","created":"2024-06-07","cited_by_count":6,"area":null},{"id":"2503.10945","title":"Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning","created":"2025-03-13","cited_by_count":6,"area":null},{"id":"2208.09595","title":"The Saddle-Point Accountant for Differential Privacy","created":"2022-08-20","cited_by_count":5,"area":null},{"id":"2311.08357","title":"Sparsity-Preserving Differentially Private Training of Large Embedding Models","created":"2023-11-14","cited_by_count":5,"area":null},{"id":"2509.07055","title":"Sequentially Auditing Differential Privacy","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2503.12314","title":"Empirical Privacy Variance","created":"2025-03-16","cited_by_count":3,"area":null},{"id":"2506.06549","title":"GeoClip: Geometry-Aware Clipping for Differentially Private SGD","created":"2025-06-06","cited_by_count":3,"area":null},{"id":"2510.18232","title":"ACTG-ARL: Differentially Private Conditional Text Generation with RL-Boosted Control","created":"2025-10-21","cited_by_count":3,"area":null},{"id":"2601.21636","title":"Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocation","created":"2026-01-29","cited_by_count":3,"area":null},{"id":"2307.11106","title":"The importance of feature preprocessing for differentially private linear optimization","created":"2023-07-19","cited_by_count":2,"area":null},{"id":"2401.10294","title":"Tight Group-Level DP Guarantees for DP-SGD with Sampling via Mixture of Gaussians Mechanisms","created":"2024-01-17","cited_by_count":2,"area":null},{"id":"2402.06701","title":"Privacy Profiles for Private Selection","created":"2024-02-09","cited_by_count":2,"area":null},{"id":"2402.14397","title":"Closed-Form Bounds for DP-SGD against Record-level Inference","created":"2024-02-22","cited_by_count":2,"area":null},{"id":"2605.07072","title":"Less Random, More Private: What is the Optimal Subsampling Scheme for DP-SGD?","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2411.09142","title":"Laplace Transform Interpretation of Differential Privacy","created":"2024-11-14","cited_by_count":1,"area":null},{"id":"2412.02340","title":"PAPAYA Federated Analytics Stack: Engineering Privacy, Scalability and Practicality","created":"2024-12-03","cited_by_count":1,"area":null},{"id":"2505.22703","title":"Private Rate-Constrained Optimization with Applications to Fair Learning","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2605.06259","title":"Trade-off Functions for DP-SGD with Subsampling based on Random Allocation: Tight Upper and Lower Bounds","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2606.05435","title":"DP-MacAdam: Differentially Private Mechanism with Adaptive Clipping and Adaptive Momentum","created":"2026-06-03","cited_by_count":1,"area":null},{"id":"2304.12185","title":"DPAF: Image Synthesis via Differentially Private Aggregation in Forward Phase","created":"2023-04-20","cited_by_count":0,"area":null},{"id":"2310.03104","title":"Differentially Private Optimization for Non-Decomposable Objective Functions","created":"2023-10-04","cited_by_count":0,"area":null},{"id":"2412.01756","title":"Adversarial Sample-Based Approach for Tighter Privacy Auditing in Final Model-Only Scenarios","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2510.10990","title":"Secret-Protected Evolution for Differentially Private Synthetic Text Generation","created":"2025-10-13","cited_by_count":0,"area":null},{"id":"2602.23262","title":"Decomposing Private Image Generation via Coarse-to-Fine Wavelet Modeling","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2602.23516","title":"Lap2: Revisiting Laplace DP-SGD for High Dimensions via Majorization Theory","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.24695","title":"Amplified Patch-Level Differential Privacy for Free via Random Cropping","created":"2026-03-25","cited_by_count":0,"area":null},{"id":"2604.20985","title":"Differentially Private Model Merging","created":"2026-04-22","cited_by_count":0,"area":null},{"id":"2605.21780","title":"Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2607.29100","title":"StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers","created":"2026-07-31","cited_by_count":0,"area":null},{"id":"2609.00492","title":"The Privacy-Hallucination Tradeoff in Differentially Private Language Models","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2610.17120","title":"Can R\\'enyi Accountants Beat Lossless Accountants for DP-SGD?","created":"2026-10-12","cited_by_count":0,"area":null},{"id":"2610.17249","title":"Tight End-to-End Accounting for Differentially Private Synthetic Data","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}