{"total":22,"rows":[{"id":"2407.07737","title":"Fine-Tuning Large Language Models with User-Level Differential Privacy","created":"2024-07-10","cited_by_count":29,"area":null},{"id":"2406.14322","title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning","created":"2024-06-20","cited_by_count":24,"area":null},{"id":"2502.08202","title":"Privacy amplification by random allocation","created":"2025-02-12","cited_by_count":15,"area":null},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2410.01068","title":"Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothness","created":"2024-10-01","cited_by_count":8,"area":null},{"id":"2503.03043","title":"Leveraging Randomness in Model and Data Partitioning for Privacy Amplification","created":"2025-03-04","cited_by_count":7,"area":null},{"id":"2506.00660","title":"Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications","created":"2025-05-31","cited_by_count":7,"area":null},{"id":"2407.05237","title":"Privacy of the last iterate in cyclically-sampled DP-SGD on nonconvex composite losses","created":"2024-07-07","cited_by_count":6,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2601.10237","title":"Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD","created":"2026-01-15","cited_by_count":4,"area":null},{"id":"2406.17298","title":"Efficient and Scalable Implementation of Differentially Private Deep Learning without Shortcuts","created":"2024-06-25","cited_by_count":3,"area":null},{"id":"2503.12314","title":"Empirical Privacy Variance","created":"2025-03-16","cited_by_count":3,"area":null},{"id":"2602.17284","title":"Efficient privacy loss accounting for subsampling and random allocation","created":"2026-02-19","cited_by_count":3,"area":null},{"id":"2407.04884","title":"Convex Approximation of Two-Layer ReLU Networks for Hidden State Differential Privacy","created":"2024-07-05","cited_by_count":2,"area":null},{"id":"2512.19019","title":"Optimizer Dynamics at the Edge of Stability with Differential Privacy","created":"2025-12-22","cited_by_count":1,"area":null},{"id":"2605.06259","title":"Trade-off Functions for DP-SGD with Subsampling based on Random Allocation: Tight Upper and Lower Bounds","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2601.17189","title":"Rethinking Benchmarks for Differentially Private Image Classification","created":"2026-01-23","cited_by_count":0,"area":null},{"id":"2602.05012","title":"Private PoEtry: Private In-Context Learning via Product of Experts","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2604.11820","title":"Refined Differentially Private Linear Regression via Extension of a Free Lunch Result","created":"2026-04-11","cited_by_count":0,"area":null},{"id":"2604.28032","title":"Shuffling-Aware Optimization for Private Vector Mean Estimation","created":"2026-04-30","cited_by_count":0,"area":null}],"next_cursor":null}