{"list":"other","total":68,"rows":[{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"2202.07646","title":"Quantifying Memorization Across Neural Language Models","created":"2022-02-15","cited_by_count":763},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1702.07476","title":"Renyi Differential Privacy","created":"2017-02-24","cited_by_count":650},{"id":"1802.04434","title":"signSGD: Compressed Optimisation for Non-Convex Problems","created":"2018-02-13","cited_by_count":571},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"2008.03703","title":"What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimation","created":"2020-08-09","cited_by_count":497},{"id":"1906.05271","title":"Does Learning Require Memorization? A Short Tale about a Long Tail","created":"2019-06-12","cited_by_count":460},{"id":"2109.12298","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","created":"2021-09-25","cited_by_count":383},{"id":"2001.02610","title":"iDLG: Improved Deep Leakage from Gradients","created":"2020-01-08","cited_by_count":382},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"1605.02065","title":"Concentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds","created":"2016-05-06","cited_by_count":346},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326},{"id":"2007.05084","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning","created":"2020-07-09","cited_by_count":309},{"id":"1902.06156","title":"A Little Is Enough: Circumventing Defenses For Distributed Learning","created":"2019-02-16","cited_by_count":288},{"id":"1407.6981","title":"RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response","created":"2014-07-25","cited_by_count":272},{"id":"1911.07963","title":"Can You Really Backdoor Federated Learning?","created":"2019-11-18","cited_by_count":255},{"id":"1812.00535","title":"Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning","created":"2018-12-03","cited_by_count":246},{"id":"1808.00087","title":"Subsampled R\\'enyi Differential Privacy and Analytical Moments Accountant","created":"2018-07-31","cited_by_count":236},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1805.06530","title":"Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoising","created":"2018-05-16","cited_by_count":218},{"id":"1908.10530","title":"R\\'enyi Differential Privacy of the Sampled Gaussian Mechanism","created":"2019-08-28","cited_by_count":204},{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170},{"id":"1811.12469","title":"Amplification by Shuffling: From Local to Central Differential Privacy via Anonymity","created":"2018-11-29","cited_by_count":164},{"id":"1712.01524","title":"Collecting Telemetry Data Privately","created":"2017-12-05","cited_by_count":149},{"id":"2004.00010","title":"The Discrete Gaussian for Differential Privacy","created":"2020-03-31","cited_by_count":135},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127},{"id":"2108.10241","title":"Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning","created":"2021-08-23","cited_by_count":118},{"id":"1808.01394","title":"Distributed Differential Privacy via Shuffling","created":"2018-08-04","cited_by_count":115},{"id":"2110.13057","title":"Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models","created":"2021-10-25","cited_by_count":108},{"id":"1806.03287","title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware","created":"2018-06-08","cited_by_count":102},{"id":"2012.12803","title":"Hiding Among the Clones: A Simple and Nearly Optimal Analysis of Privacy Amplification by Shuffling","created":"2020-12-23","cited_by_count":96},{"id":"2111.04877","title":"Papaya: Practical, Private, and Scalable Federated Learning","created":"2021-11-08","cited_by_count":90},{"id":"2102.08503","title":"Federated Evaluation and Tuning for On-Device Personalization: System Design & Applications","created":"2021-02-16","cited_by_count":85},{"id":"2002.04156","title":"Turbo-Aggregate: Breaking the Quadratic Aggregation Barrier in Secure Federated Learning","created":"2020-02-11","cited_by_count":78},{"id":"1903.02837","title":"The Privacy Blanket of the Shuffle Model","created":"2019-03-07","cited_by_count":74},{"id":"2202.00580","title":"Fishing for User Data in Large-Batch Federated Learning via Gradient Magnification","created":"2022-02-01","cited_by_count":73},{"id":"2111.07380","title":"Eluding Secure Aggregation in Federated Learning via Model Inconsistency","created":"2021-11-14","cited_by_count":67},{"id":"2305.18465","title":"Federated Learning of Gboard Language Models with Differential Privacy","created":"2023-05-29","cited_by_count":66},{"id":"1710.00901","title":"Prochlo: Strong Privacy for Analytics in the Crowd","created":"2017-10-02","cited_by_count":51},{"id":"2203.16654","title":"Geographic Spines in the 2020 Census Disclosure Avoidance System","created":"2022-03-30","cited_by_count":44},{"id":"1703.06255","title":"Prio: Private, Robust, and Scalable Computation of Aggregate Statistics","created":"2017-03-18","cited_by_count":36},{"id":"2002.00817","title":"Private Summation in the Multi-Message Shuffle Model","created":"2020-02-03","cited_by_count":34},{"id":"1902.08534","title":"Federated Heavy Hitters Discovery with Differential Privacy","created":"2019-02-22","cited_by_count":32},{"id":"2008.02651","title":"Improving on-device speaker verification using federated learning with privacy","created":"2020-08-06","cited_by_count":30},{"id":"1909.09630","title":"Manipulation Attacks in Local Differential Privacy","created":"2019-09-20","cited_by_count":28},{"id":"2102.12099","title":"Lossless Compression of Efficient Private Local Randomizers","created":"2021-02-24","cited_by_count":27},{"id":"2002.05839","title":"LinkedIn's Audience Engagements API: A Privacy Preserving Data Analytics System at Scale","created":"2020-02-14","cited_by_count":26},{"id":"2109.13158","title":"Differentially Private Aggregation in the Shuffle Model: Almost Central Accuracy in Almost a Single Message","created":"2021-09-27","cited_by_count":18},{"id":"1502.06309","title":"Learning with Differential Privacy: Stability, Learnability and the Sufficiency and Necessity of ERM Principle","created":"2015-02-23","cited_by_count":16},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16},{"id":"1909.11073","title":"Private Aggregation from Fewer Anonymous Messages","created":"2019-09-24","cited_by_count":15},{"id":"2306.04444","title":"Fast Optimal Locally Private Mean Estimation via Random Projections","created":"2023-06-07","cited_by_count":14},{"id":"2012.14884","title":"Lightweight Techniques for Private Heavy Hitters","created":"2020-12-29","cited_by_count":13},{"id":"2203.00194","title":"Private Frequency Estimation via Projective Geometry","created":"2022-03-01","cited_by_count":9},{"id":"2010.13981","title":"A Members First Approach to Enabling LinkedIn's Labor Market Insights at Scale","created":"2020-10-27","cited_by_count":5},{"id":"2103.14035","title":"U.S. Broadband Coverage Data Set: A Differentially Private Data Release","created":"2021-03-24","cited_by_count":5},{"id":"2107.01179","title":"Google COVID-19 Vaccination Search Insights: Anonymization Process Description","created":"2021-07-02","cited_by_count":5},{"id":"2112.05693","title":"Sample and Threshold Differential Privacy: Histograms and applications","created":"2021-12-10","cited_by_count":5},{"id":"2202.10618","title":"Differential Secrecy for Distributed Data and Applications to Robust Differentially Secure Vector Summation","created":"2022-02-22","cited_by_count":5},{"id":"2306.14793","title":"Private Federated Learning in Gboard","created":"2023-06-26","cited_by_count":5},{"id":"2210.01834","title":"Invariant Aggregator for Defending against Federated Backdoor Attacks","created":"2022-10-04","cited_by_count":2},{"id":"2307.11749","title":"Differentially Private Heavy Hitter Detection using Federated Analytics","created":"2023-07-21","cited_by_count":2}],"next_cursor":null}