RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response
Not on the map. Why?
Abstract (arXiv)
Randomized Aggregatable Privacy-Preserving Ordinal Response, or RAPPOR, is a technology for crowdsourcing statistics from end-user client software, anonymously, with strong privacy guarantees. In short, RAPPORs allow the forest of client data to be studied, without permitting the possibility of looking at individual trees. By applying randomized response in a novel manner, RAPPOR provides the mechanisms for such collection as well as for efficient, high-utility analysis of the collected data. In particular, RAPPOR permits statistics to be collected on the population of client-side strings with strong privacy guarantees for each client, and without linkability of their reports. This paper describes and motivates RAPPOR, details its differential-privacy and utility guarantees, discusses its practical deployment and properties in the face of different attack models, and, finally, gives results of its application to both synthetic and real-world data.
Key facts. Cited by 272 papers in the map (data through 14 Oct 2026). First posted on arXiv 25 Jul 2014.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 48; 2022: 55; 2023: 56; 2024: 43; 2025: 41; 2026: 29.
272 papers.
Sort:
By area:
- 2021Trustworthy AI: From Principles to Practicescited by 207
- 2021Deep Learning with Label Differential Privacycited by 117
- 2023Foundation Models and Fair Usecited by 116
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 86
- 2021Robust and Differentially Private Mean Estimationcited by 66
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2022Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Losscited by 61
- 2021A Theory of PAC Learnability of Partial Concept Classescited by 60
- 2021Socially Responsible AI Algorithms: Issues, Purposes, and Challengescited by 56
- 2021Federated Social Recommendation with Graph Neural Networkcited by 56
- 2021Antipodes of Label Differential Privacy: PATE and ALIBIcited by 52
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributionscited by 52
38 more
- 2022Private Convex Optimization via Exponential Mechanismcited by 49
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2022Optimal Algorithms for Mean Estimation under Local Differential Privacycited by 36
- 2021Decision Making with Differential Privacy under a Fairness Lenscited by 32
- 2021Generalized Linear Bandits with Local Differential Privacycited by 29
- 2022Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacycited by 29
- 2021Lossless Compression of Efficient Private Local Randomizerscited by 27
- 2021Differentially private inference via noisy optimizationcited by 27
- 2022A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learningcited by 27
- 2023From Robustness to Privacy and Backcited by 27
- 2021Stronger Privacy for Federated Collaborative Filtering with Implicit Feedbackcited by 26
- 2022Optimal and Differentially Private Data Acquisition: Central and Local Mechanismscited by 24
- 2022DP-PCA: Statistically Optimal and Differentially Private PCAcited by 24
- 2022Differentially Private SGDA for Minimax Problemscited by 23
- 2021Differentially Private SGD with Non-Smooth Lossescited by 22
- 2021Optimal Compression of Locally Differentially Private Mechanismscited by 22
- 2021Label differential privacy via clusteringcited by 20
- 2021Locally Private k-Means in One Roundcited by 19
- 2021Dopamine: Differentially Private Federated Learning on Medical Datacited by 18
- 2021Private Prediction Setscited by 17
- 2021Wide Network Learning with Differential Privacycited by 17
- 2021Privacy Amplification via Shuffling for Linear Contextual Banditscited by 17
- 2022Privacy-Aware Compression for Federated Data Analysiscited by 17
- 2022Discrete Distribution Estimation under User-level Local Differential Privacycited by 17
- 2023ReSQueing Parallel and Private Stochastic Convex Optimizationcited by 17
- 2023Active Membership Inference Attack under Local Differential Privacy in Federated Learningcited by 17
- 2023Randomized Quantization is All You Need for Differential Privacy in Federated Learningcited by 17
- 2021On the Renyi Differential Privacy of the Shuffle Modelcited by 16
- 2022Faster Privacy Accounting via Evolving Discretizationcited by 15
- 2022Differentially Private Estimation of Heterogeneous Causal Effectscited by 14
- 2022DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardwarecited by 14
- 2024Trustworthy Distributed AI Systems: Robustness, Privacy, and Governancecited by 14
- 2021Differentially Private Imaging via Latent Space Manipulationcited by 13
- 2021Privately Learning Mixtures of Axis-Aligned Gaussianscited by 13
- 2022Private Convex Optimization in General Normscited by 13
- 2023Share Your Representation Only: Guaranteed Improvement of the Privacy-Utility Tradeoff in Federated Learningcited by 13
- 2022Private High-Dimensional Hypothesis Testingcited by 12
50 most cited of 272 All 272 (JSON)
- 2026De-biased Distribution Estimation for Locally Differential Private Survival Data9 Oct 2026
- 2026HXAI: Hierarchical Privacy-Preserving Explainable AI in Distributed Energy Systems1 Oct 2026
- 2026Privacy-Friendly Cohort Determination: Sealed, CSP-Independent In-Browser ML Inference of Professional Segments for Identity-Less Advertising28 Sep 2026
- 2026On-Device Commercial Intent Retrieval Under Size, Latency, and Privacy Constraints: A 3 MiB Retrieval System with Typed Egress Boundaries16 Sep 2026
- 2026Trust-But-Verify: Poisoning-Resilient Locally Private Graph Learning Protocols7 Sep 2026
- 2026ABC: Numerical Data Collection under Local Differential Privacy without Prior Knowledge6 Aug 2026
- 2026Private Direct Preference Optimization for LLM Alignment5 Aug 2026
- 2026Compass: Continuously Aligning Social Media Feeds via In-Situ Reflections4 Aug 2026
- 2026Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy30 Jul 2026
- 2026How Much is Left? LLMs Linearly Encode Their Remaining Output Length6 Jul 2026
- 2026Scalable Differentially Private Data Compression via Diffusion and Stochastic Codes3 Jul 2026
- 2026Efficient DP-SGD for LLMs with Randomized Clipping24 May 2026
38 more
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy16 May 2026
- 2026DP-Muon: Differentially Private Optimization via Matrix-Orthogonalized Momentum13 May 2026
- 2026Differentially Private Sampling from Distributions via Wasserstein Projection11 May 2026
- 2026Scalable and Private Federated Learning Using Distributed Differential Privacy and Secure Aggregation8 Apr 2026
- 2026Adversarial Attacks on Locally Private Graph Neural Networks21 Mar 2026
- 2026Privacy-Preserving Machine Learning for IoT: A Cross-Paradigm Survey and Future Roadmap13 Mar 2026
- 2026Understanding Disclosure Risk in Differential Privacy with Applications to Noise Calibration and Auditing (Extended Version)12 Mar 2026
- 2026FedLECC: Cluster- and Loss-Guided Client Selection for Federated Learning under Non-IID Data9 Mar 2026
- 2026Privacy-Utility Tradeoffs in Quantum Information Processing11 Feb 2026
- 2026HoGS: Homophily-Oriented Graph Synthesis for Local Differentially Private GNN Training9 Feb 2026
- 2026Sequential Auditing for f-Differential Privacy6 Feb 2026
- 2026Classification Under Local Differential Privacy with Model Reversal and Model Averaging5 Feb 2026
- 2026BlockRR: A Unified Framework of RR-type Algorithms for Label Differential Privacy3 Feb 2026
- 2026NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs22 Jan 2026
- 2026Optimality of Staircase Mechanisms for Vector Queries under Differential Privacy21 Jan 2026
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD15 Jan 2026
- 2026Near-Optimal Private Linear Regression via Iterative Hessian Mixing12 Jan 2026
- 2025Clust-PSI-PFL: A Population Stability Index Approach for Clustered Non-IID Personalized Federated Learning23 Dec 2025
- 2025AlignDP: Hybrid Differential Privacy with Rarity-Aware Protection for LLMs19 Dec 2025
- 2025Optimal Fairness under Local Differential Privacy20 Nov 2025
- 2025Private Frequency Estimation Via Residue Number Systems14 Nov 2025
- 2025Setting varepsilon is not the Issue in Differential Privacy9 Nov 2025
- 2025LAFA: Agentic LLM-Driven Federated Analytics over Decentralized Data Sources21 Oct 2025
- 2025ACTG-ARL: Differentially Private Conditional Text Generation with RL-Boosted Control21 Oct 2025
- 2025High-Probability Bounds For Heterogeneous Local Differential Privacy13 Oct 2025
- 2025Locally Optimal Private Sampling: Beyond the Global Minimax10 Oct 2025
- 2025Cocoon: A System Architecture for Differentially Private Training with Correlated Noises8 Oct 2025
- 2025Consistent Estimation of Numerical Distributions under Local Differential Privacy by Wavelet Expansion24 Sep 2025
- 2025Privacy Preserving In-Context-Learning Framework for Large Language Models17 Sep 2025
- 2025Beyond ATE: Multi-Criteria Design for A/B Testing6 Sep 2025
- 2025BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints6 Sep 2025
- 2025On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy5 Sep 2025
- 2025Managing Correlations in Data and Privacy Demand2 Sep 2025
- 2025Graph Structure Learning with Privacy Guarantees for Open Graph Data25 Jul 2025
- 2025A Unified Framework for Adversary-Aware Differential Privacy Bounds10 Jul 2025
- 2025Non-Asymptotic Analysis of Online Local Private Learning with SGD9 Jul 2025
- 2025On the Inherent Privacy of Zeroth Order Projected Gradient Descent8 Jul 2025
- 2025The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing20 Jun 2025
50 newest of 272 All 272 (JSON)
- 2023Active Membership Inference Attack under Local Differential Privacy in Federated Learningcited by 17
- 2022Fine-grained Poisoning Attack to Local Differential Privacy Protocols for Mean and Variance Estimationcited by 9
- 2024On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attackscited by 5
- 2022Robustness of Locally Differentially Private Graph Analysis Against Poisoningcited by 2
- 2025A Unified Framework for Adversary-Aware Differential Privacy Boundscited by 2
- 2026Understanding Disclosure Risk in Differential Privacy with Applications to Noise Calibration and Auditing (Extended Version)cited by 2
- 2025Data Poisoning Attacks to Locally Differentially Private Range Query Protocolscited by 1
- 2025Mitigating Data Poisoning Attacks to Local Differential Privacycited by 1
- 2025Devil's Hand: Data Poisoning Attacks to Locally Private Graph Learning Protocolscited by 1
- 2024Bayes-Nash Generative Privacy Against Membership Inference Attackscited by 0
- 2026Trust-But-Verify: Poisoning-Resilient Locally Private Graph Learning Protocolscited by 0
- 2026Trust-But-Verify: Poisoning-Resilient Locally Private Graph Learning Protocols7 Sep 2026
- 2026Understanding Disclosure Risk in Differential Privacy with Applications to Noise Calibration and Auditing (Extended Version)12 Mar 2026
- 2025A Unified Framework for Adversary-Aware Differential Privacy Bounds10 Jul 2025
- 2025Devil's Hand: Data Poisoning Attacks to Locally Private Graph Learning Protocols11 Jun 2025
- 2025Mitigating Data Poisoning Attacks to Local Differential Privacy2 Jun 2025
- 2025Data Poisoning Attacks to Locally Differentially Private Range Query Protocols5 Mar 2025
- 2024Bayes-Nash Generative Privacy Against Membership Inference Attacks9 Oct 2024
- 2024On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attacks28 Mar 2024
- 2023Active Membership Inference Attack under Local Differential Privacy in Federated Learning24 Feb 2023
- 2022Robustness of Locally Differentially Private Graph Analysis Against Poisoning25 Oct 2022
- 2022Fine-grained Poisoning Attack to Local Differential Privacy Protocols for Mean and Variance Estimation24 May 2022
- 2021Trustworthy AI: From Principles to Practicescited by 207
- 2021Deep Learning with Label Differential Privacycited by 117
- 2023Foundation Models and Fair Usecited by 116
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 86
- 2021Robust and Differentially Private Mean Estimationcited by 66
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2022Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Losscited by 61
- 2021A Theory of PAC Learnability of Partial Concept Classescited by 60
- 2021Socially Responsible AI Algorithms: Issues, Purposes, and Challengescited by 56
- 2021Federated Social Recommendation with Graph Neural Networkcited by 56
- 2021Antipodes of Label Differential Privacy: PATE and ALIBIcited by 52
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributionscited by 52
12 most cited of 257 All 257 (JSON)
- 2026De-biased Distribution Estimation for Locally Differential Private Survival Data9 Oct 2026
- 2026HXAI: Hierarchical Privacy-Preserving Explainable AI in Distributed Energy Systems1 Oct 2026
- 2026Privacy-Friendly Cohort Determination: Sealed, CSP-Independent In-Browser ML Inference of Professional Segments for Identity-Less Advertising28 Sep 2026
- 2026On-Device Commercial Intent Retrieval Under Size, Latency, and Privacy Constraints: A 3 MiB Retrieval System with Typed Egress Boundaries16 Sep 2026
- 2026ABC: Numerical Data Collection under Local Differential Privacy without Prior Knowledge6 Aug 2026
- 2026Compass: Continuously Aligning Social Media Feeds via In-Situ Reflections4 Aug 2026
- 2026Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy30 Jul 2026
- 2026How Much is Left? LLMs Linearly Encode Their Remaining Output Length6 Jul 2026
- 2026Scalable Differentially Private Data Compression via Diffusion and Stochastic Codes3 Jul 2026
- 2026Efficient DP-SGD for LLMs with Randomized Clipping24 May 2026
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy16 May 2026
- 2026DP-Muon: Differentially Private Optimization via Matrix-Orthogonalized Momentum13 May 2026
12 newest of 257 All 257 (JSON)