{"list":"other","total":74,"rows":[{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1702.07476","title":"Renyi Differential Privacy","created":"2017-02-24","cited_by_count":650},{"id":"1610.05755","title":"Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data","created":"2016-10-18","cited_by_count":348},{"id":"1311.0776","title":"The Composition Theorem for Differential Privacy","created":"2013-11-04","cited_by_count":297},{"id":"1407.6981","title":"RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response","created":"2014-07-25","cited_by_count":272},{"id":"1807.01647","title":"Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergences","created":"2018-07-04","cited_by_count":242},{"id":"2006.07709","title":"Auditing Differentially Private Machine Learning: How Private is Private SGD?","created":"2020-06-13","cited_by_count":218},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"2103.00039","title":"Practical and Private (Deep) Learning without Sampling or Shuffling","created":"2021-02-26","cited_by_count":170},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123},{"id":"2102.06062","title":"Deep Learning with Label Differential Privacy","created":"2021-02-11","cited_by_count":117},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107},{"id":"1808.06651","title":"Privacy Amplification by Iteration","created":"2018-08-20","cited_by_count":100},{"id":"2106.08567","title":"Optimal Accounting of Differential Privacy via Characteristic Function","created":"2021-06-16","cited_by_count":86},{"id":"2102.05855","title":"Differential Privacy Dynamics of Langevin Diffusion and Noisy Gradient Descent","created":"2021-02-11","cited_by_count":73},{"id":"1708.06145","title":"Knock Knock, Who's There? Membership Inference on Aggregate Location Data","created":"2017-08-21","cited_by_count":70},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59},{"id":"2211.06550","title":"TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Data","created":"2022-11-12","cited_by_count":57},{"id":"2106.03408","title":"Antipodes of Label Differential Privacy: PATE and ALIBI","created":"2021-06-07","cited_by_count":52},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46},{"id":"2203.16654","title":"Geographic Spines in the 2020 Census Disclosure Avoidance System","created":"2022-03-30","cited_by_count":44},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41},{"id":"2202.12219","title":"Debugging Differential Privacy: A Case Study for Privacy Auditing","created":"2022-02-24","cited_by_count":40},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40},{"id":"1805.10277","title":"Detecting Violations of Differential Privacy","created":"2018-05-25","cited_by_count":39},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36},{"id":"1906.01337","title":"SoK: Differential Privacies","created":"2019-06-04","cited_by_count":34},{"id":"2206.05199","title":"Bayesian Estimation of Differential Privacy","created":"2022-06-10","cited_by_count":33},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30},{"id":"1603.01699","title":"Understanding the Sparse Vector Technique for Differential Privacy","created":"2016-03-05","cited_by_count":27},{"id":"2210.08643","title":"A General Framework for Auditing Differentially Private Machine Learning","created":"2022-10-16","cited_by_count":25},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23},{"id":"1601.03229","title":"PrivTree: A Differentially Private Algorithm for Hierarchical Decompositions","created":"2016-01-13","cited_by_count":22},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22},{"id":"2405.10994","title":"\"What do you want from theory alone?\" Experimenting with Tight Auditing of Differentially Private Synthetic Data Generation","created":"2024-05-16","cited_by_count":21},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18},{"id":"2410.06266","title":"Near Exact Privacy Amplification for Matrix Mechanisms","created":"2024-10-08","cited_by_count":18},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16},{"id":"2410.16618","title":"SoK: Dataset Copyright Auditing in Machine Learning Systems","created":"2024-10-22","cited_by_count":15},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14},{"id":"2405.20769","title":"Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition","created":"2024-05-27","cited_by_count":13},{"id":"2406.13985","title":"The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging","created":"2024-06-20","cited_by_count":13},{"id":"2307.05608","title":"DP-Auditorium: a Large Scale Library for Auditing Differential Privacy","created":"2023-07-10","cited_by_count":11},{"id":"2311.06888","title":"Preserving Node-level Privacy in Graph Neural Networks","created":"2023-11-12","cited_by_count":11},{"id":"2410.06186","title":"The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD","created":"2024-10-08","cited_by_count":11},{"id":"2407.06496","title":"It's Our Loss: No Privacy Amplification for Hidden State DP-SGD With Non-Convex Loss","created":"2024-07-09","cited_by_count":10},{"id":"2501.17750","title":"Privacy Audit as Bits Transmission: (Im)possibilities for Audit by One Run","created":"2025-01-29","cited_by_count":10},{"id":"2406.08918","title":"Beyond the Calibration Point: Mechanism Comparison in Differential Privacy","created":"2024-06-13","cited_by_count":9},{"id":"2503.07199","title":"How Well Can Differential Privacy Be Audited in One Run?","created":"2025-03-10","cited_by_count":9},{"id":"1411.5428","title":"Differentially Private Algorithms for Empirical Machine Learning","created":"2014-11-20","cited_by_count":8},{"id":"2008.07485","title":"CheckDP: An Automated and Integrated Approach for Proving Differential Privacy or Finding Precise Counterexamples","created":"2020-08-17","cited_by_count":7},{"id":"2402.09403","title":"Auditing Private Prediction","created":"2024-02-14","cited_by_count":7},{"id":"2406.04827","title":"Auditing Differential Privacy Guarantees Using Density Estimation","created":"2024-06-07","cited_by_count":6},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6},{"id":"1607.08228","title":"LightDP: Towards Automating Differential Privacy Proofs","created":"2016-07-27","cited_by_count":4},{"id":"1709.05361","title":"Synthesizing Coupling Proofs of Differential Privacy","created":"2017-09-15","cited_by_count":4},{"id":"2502.07066","title":"General-Purpose $f$-DP Estimation and Auditing in a Black-Box Setting","created":"2025-02-10","cited_by_count":4},{"id":"1407.6845","title":"Higher-Order Approximate Relational Refinement Types for Mechanism Design and Differential Privacy","created":"2014-07-25","cited_by_count":3},{"id":"2108.09528","title":"Statistical Quantification of Differential Privacy: A Local Approach","created":"2021-08-21","cited_by_count":3},{"id":"2309.01597","title":"Revealing the True Cost of Locally Differentially Private Protocols: An Auditing Perspective","created":"2023-09-04","cited_by_count":3},{"id":"1903.12254","title":"Proving Differential Privacy with Shadow Execution","created":"2019-03-28","cited_by_count":2},{"id":"2103.02913","title":"Quantifying identifiability to choose and audit $\\epsilon$ in differentially private deep learning","created":"2021-03-04","cited_by_count":2},{"id":"2208.14414","title":"On the (Im)Possibility of Estimating Various Notions of Differential Privacy","created":"2022-08-30","cited_by_count":2},{"id":"2406.02797","title":"Auditing Privacy Mechanisms via Label Inference Attacks","created":"2024-06-04","cited_by_count":2},{"id":"2411.16516","title":"Curator Attack: When Blackbox Differential Privacy Auditing Loses Its Power","created":"2024-11-25","cited_by_count":1}],"next_cursor":null}