{"total":153,"rows":[{"id":"2305.18465","title":"Federated Learning of Gboard Language Models with Differential Privacy","created":"2023-05-29","cited_by_count":66,"area":null},{"id":"2306.01684","title":"Harnessing large-language models to generate private synthetic text","created":"2023-06-02","cited_by_count":65,"area":null},{"id":"2306.08153","title":"(Amplified) Banded Matrix Factorization: A unified approach to private training","created":"2023-06-13","cited_by_count":49,"area":null},{"id":"2311.09538","title":"Reducing Privacy Risks in Online Self-Disclosures with Language Models","created":"2023-11-16","cited_by_count":47,"area":null},{"id":"2310.02224","title":"Can Language Models be Instructed to Protect Personal Information?","created":"2023-10-03","cited_by_count":46,"area":"mllm"},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2402.13659","title":"Privacy-Preserving Instructions for Aligning Large Language Models","created":"2024-02-21","cited_by_count":35,"area":"alignment"},{"id":"2307.09619","title":"Towards Federated Foundation Models: Scalable Dataset Pipelines for Group-Structured Learning","created":"2023-07-18","cited_by_count":29,"area":null},{"id":"2406.02958","title":"PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs","created":"2024-06-05","cited_by_count":29,"area":null},{"id":"2407.07737","title":"Fine-Tuning Large Language Models with User-Level Differential Privacy","created":"2024-07-10","cited_by_count":29,"area":null},{"id":"2406.14322","title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning","created":"2024-06-20","cited_by_count":24,"area":null},{"id":"2407.12108","title":"Private prediction for large-scale synthetic text generation","created":"2024-07-16","cited_by_count":24,"area":null},{"id":"2403.15638","title":"Differentially Private Next-Token Prediction of Large Language Models","created":"2024-03-22","cited_by_count":22,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20,"area":null},{"id":"2412.19291","title":"RAG with Differential Privacy","created":"2024-12-26","cited_by_count":18,"area":"rag"},{"id":"2310.15526","title":"Privacy Amplification for Matrix Mechanisms","created":"2023-10-24","cited_by_count":17,"area":null},{"id":"2501.14959","title":"Systemizing Multiplicity: The Curious Case of Arbitrariness in Machine Learning","created":"2025-01-24","cited_by_count":17,"area":null},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2503.12347","title":"Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMs","created":"2025-03-16","cited_by_count":16,"area":null},{"id":"2410.08892","title":"Federated Learning in Practice: Reflections and Projections","created":"2024-10-11","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2407.13621","title":"Differential Privacy Mechanisms in Neural Tangent Kernel Regression","created":"2024-07-18","cited_by_count":14,"area":null},{"id":"2407.14717","title":"Provable Differentially Private Computation of the Cross-Attention Mechanism","created":"2024-07-20","cited_by_count":14,"area":"diffusion"},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2305.13209","title":"Faster Differentially Private Convex Optimization via Second-Order Methods","created":"2023-05-22","cited_by_count":13,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2405.13763","title":"Banded Square Root Matrix Factorization for Differentially Private Model Training","created":"2024-05-22","cited_by_count":12,"area":null},{"id":"2305.08367","title":"Toward Highly Efficient and Private Submodular Maximization via Matrix-Based Acceleration","created":"2023-05-15","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2410.06186","title":"The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD","created":"2024-10-08","cited_by_count":11,"area":null},{"id":"2503.14681","title":"DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis","created":"2025-03-18","cited_by_count":11,"area":null},{"id":"2305.05973","title":"Synthetic Query Generation for Privacy-Preserving Deep Retrieval Systems using Differentially Private Language Models","created":"2023-05-10","cited_by_count":10,"area":null},{"id":"2507.02974","title":"InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy","created":"2025-06-30","cited_by_count":10,"area":"rag"},{"id":"2311.01295","title":"DP-Mix: Mixup-based Data Augmentation for Differentially Private Learning","created":"2023-11-02","cited_by_count":9,"area":null},{"id":"2403.08917","title":"Efficiently Computing Similarities to Private Datasets","created":"2024-03-13","cited_by_count":9,"area":null},{"id":"2402.18752","title":"Pre-training Differentially Private Models with Limited Public Data","created":"2024-02-28","cited_by_count":8,"area":null},{"id":"2407.02191","title":"Attack-Aware Noise Calibration for Differential Privacy","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2505.14585","title":"Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning","created":"2025-05-20","cited_by_count":8,"area":"lr"},{"id":"2311.14465","title":"DP-NMT: Scalable Differentially-Private Machine Translation","created":"2023-11-24","cited_by_count":7,"area":null},{"id":"2311.14859","title":"An Empirical Investigation into Benchmarking Model Multiplicity for Trustworthy Machine Learning: A Case Study on Image Classification","created":"2023-11-24","cited_by_count":7,"area":null},{"id":"2406.16715","title":"GC4NC: A Benchmark Framework for Graph Condensation on Node Classification with New Insights","created":"2024-06-24","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2503.10945","title":"Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning","created":"2025-03-13","cited_by_count":6,"area":null},{"id":"2507.01129","title":"On Design Principles for Private Adaptive Optimizers","created":"2025-07-01","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2310.11739","title":"Unintended Memorization in Large ASR Models, and How to Mitigate It","created":"2023-10-18","cited_by_count":5,"area":null},{"id":"2311.08357","title":"Sparsity-Preserving Differentially Private Training of Large Embedding Models","created":"2023-11-14","cited_by_count":5,"area":null},{"id":"2412.02467","title":"DP-2Stage: Adapting Language Models as Differentially Private Tabular Data Generators","created":"2024-12-03","cited_by_count":5,"area":null},{"id":"2309.15696","title":"A Unified View of Differentially Private Deep Generative Modeling","created":"2023-09-27","cited_by_count":4,"area":null},{"id":"2405.15002","title":"Private Regression via Data-Dependent Sufficient Statistic Perturbation","created":"2024-05-23","cited_by_count":4,"area":null},{"id":"2407.13070","title":"The Cost of Arbitrariness for Individuals: Examining the Legal and Technical Challenges of Model Multiplicity","created":"2024-05-28","cited_by_count":4,"area":null},{"id":"2407.15224","title":"PUFFLE: Balancing Privacy, Utility, and Fairness in Federated Learning","created":"2024-07-21","cited_by_count":4,"area":null},{"id":"2601.10237","title":"Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD","created":"2026-01-15","cited_by_count":4,"area":null},{"id":"2306.07674","title":"Differentially Private One Permutation Hashing and Bin-wise Consistent Weighted Sampling","created":"2023-06-13","cited_by_count":3,"area":null},{"id":"2312.11126","title":"Harnessing Inherent Noises for Privacy Preservation in Quantum Machine Learning","created":"2023-12-18","cited_by_count":3,"area":null},{"id":"2405.00725","title":"Federated Learning and Differential Privacy Techniques on Multi-hospital Population-scale Electrocardiogram Data","created":"2024-04-26","cited_by_count":3,"area":null},{"id":"2410.17098","title":"Activity Recognition on Avatar-Anonymized Datasets with Masked Differential Privacy","created":"2024-10-22","cited_by_count":3,"area":null},{"id":"2501.14414","title":"SoK: What Makes Private Learning Unfair?","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2502.13482","title":"Smoothed Normalization for Efficient Distributed Private Optimization","created":"2025-02-19","cited_by_count":3,"area":null},{"id":"2502.14087","title":"Learning from End User Data with Shuffled Differential Privacy over Kernel Densities","created":"2025-02-19","cited_by_count":3,"area":null},{"id":"2503.12314","title":"Empirical Privacy Variance","created":"2025-03-16","cited_by_count":3,"area":null},{"id":"2601.21636","title":"Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocation","created":"2026-01-29","cited_by_count":3,"area":null},{"id":"2602.11528","title":"Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs","created":"2026-02-12","cited_by_count":3,"area":null},{"id":"2303.10218","title":"An Empirical Evaluation of Federated Contextual Bandit Algorithms","created":"2023-03-17","cited_by_count":2,"area":null},{"id":"2307.11106","title":"The importance of feature preprocessing for differentially private linear optimization","created":"2023-07-19","cited_by_count":2,"area":null},{"id":"2307.11280","title":"Epsilon*: Privacy Metric for Machine Learning Models","created":"2023-07-21","cited_by_count":2,"area":null},{"id":"2309.04515","title":"Privacy Preserving Federated Learning with Convolutional Variational Bottlenecks","created":"2023-09-08","cited_by_count":2,"area":null},{"id":"2402.06701","title":"Privacy Profiles for Private Selection","created":"2024-02-09","cited_by_count":2,"area":null},{"id":"2403.06672","title":"Provable Mutual Benefits from Federated Learning in Privacy-Sensitive Domains","created":"2024-03-11","cited_by_count":2,"area":null},{"id":"2403.07588","title":"Visual Privacy Auditing with Diffusion Models","created":"2024-03-12","cited_by_count":2,"area":"diffusion"},{"id":"2409.13953","title":"Training Large ASR Encoders with Differential Privacy","created":"2024-09-21","cited_by_count":2,"area":null},{"id":"2502.06374","title":"Hyperparameters in Score-Based Membership Inference Attacks","created":"2025-02-10","cited_by_count":2,"area":"safety"},{"id":"2502.13193","title":"Private Text Generation by Seeding Large Language Model Prompts","created":"2025-02-18","cited_by_count":2,"area":null},{"id":"2505.19969","title":"Differential Privacy Analysis of Decentralized Gossip Averaging under Varying Threat Models","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2505.24603","title":"The Gaussian Mixing Mechanism: Renyi Differential Privacy via Gaussian Sketches","created":"2025-05-30","cited_by_count":2,"area":null},{"id":"2506.22342","title":"Improving Epidemic Analyses with Privacy-Preserving Integration of Sensitive Data","created":"2025-06-27","cited_by_count":2,"area":null},{"id":"2507.08158","title":"A Unified Framework for Adversary-Aware Differential Privacy Bounds","created":"2025-07-10","cited_by_count":2,"area":"safety"},{"id":"2511.16792","title":"Membership Inference Attacks Beyond Overfitting","created":"2025-11-20","cited_by_count":2,"area":"safety"},{"id":"2512.01025","title":"Operator-Theoretic Framework for Gradient-Free Federated Learning","created":"2025-11-30","cited_by_count":2,"area":null},{"id":"2605.07072","title":"Less Random, More Private: What is the Optimal Subsampling Scheme for DP-SGD?","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2304.05127","title":"Balancing Privacy and Performance for Private Federated Learning Algorithms","created":"2023-04-11","cited_by_count":1,"area":null},{"id":"2311.06255","title":"Privacy-Engineered Value Decomposition Networks for Cooperative Multi-Agent Reinforcement Learning","created":"2023-09-13","cited_by_count":1,"area":null},{"id":"2312.16554","title":"A Theoretical Analysis of Efficiency Constrained Utility-Privacy Bi-Objective Optimization in Federated Learning","created":"2023-12-27","cited_by_count":1,"area":null},{"id":"2402.05525","title":"Differentially Private Deep Model-Based Reinforcement Learning","created":"2024-02-08","cited_by_count":1,"area":"offlinerl"},{"id":"2403.19009","title":"Towards Sustainable SecureML: Quantifying Carbon Footprint of Adversarial Machine Learning","created":"2024-03-27","cited_by_count":1,"area":null},{"id":"2406.02716","title":"Optimal Rates for $O(1)$-Smooth DP-SCO with a Single Epoch and Large Batches","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2407.18789","title":"Granularity is crucial when applying differential privacy to text: An investigation for neural machine translation","created":"2024-07-26","cited_by_count":1,"area":null},{"id":"2409.01329","title":"Assessing the Impact of Image Dataset Features on Privacy-Preserving Machine Learning","created":"2024-09-02","cited_by_count":1,"area":null},{"id":"2409.04500","title":"Benchmarking Estimators for Natural Experiments: A Novel Dataset and a Doubly Robust Algorithm","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2410.08299","title":"Privately Learning from Graphs with Applications in Fine-tuning Large Language Models","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2411.02051","title":"R+R:Understanding Hyperparameter Effects in DP-SGD","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2412.20798","title":"Reconciling Privacy and Explainability in High-Stakes: A Systematic Inquiry","created":"2024-12-30","cited_by_count":1,"area":null},{"id":"2501.17634","title":"Federated Learning With Individualized Privacy Through Client Sampling","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2503.13872","title":"Empirical Calibration and Metric Differential Privacy in Language Models","created":"2025-03-18","cited_by_count":1,"area":null},{"id":"2507.04528","title":"Towards integration of Privacy Enhancing Technologies in Explainable Artificial Intelligence","created":"2025-07-06","cited_by_count":1,"area":null},{"id":"2509.03472","title":"DPQuant: Efficient and Differentially-Private Model Training via Dynamic Quantization Scheduling","created":"2025-09-03","cited_by_count":1,"area":null},{"id":"2510.01744","title":"Private and Fair Machine Learning: Revisiting the Disparate Impact of Differentially Private SGD","created":"2025-10-02","cited_by_count":1,"area":null}],"next_cursor":"100"}