Algorithmic Stability for Adaptive Data Analysis
Not on the map. Why?
Abstract (arXiv)
Adaptivity is an important feature of data analysis---the choice of questions to ask about a dataset often depends on previous interactions with the same dataset. However, statistical validity is typically studied in a nonadaptive model, where all questions are specified before the dataset is drawn. Recent work by Dwork et al. (STOC, 2015) and Hardt and Ullman (FOCS, 2014) initiated the formal study of this problem, and gave the first upper and lower bounds on the achievable generalization error for adaptive data analysis. Specifically, suppose there is an unknown distribution P and a set of n independent samples x is drawn from P. We seek an algorithm that, given x as input, accurately answers a sequence of adaptively chosen queries about the unknown distribution P. How many samples n must we draw from the distribution, as a function of the type of queries, the number of queries, and the desired level of accuracy? In this work we make two new contributions: (i) We give upper bounds on the number of samples n that are needed to answer statistical queries. The bounds improve and simplify the work of Dwork et al. (STOC, 2015), and have been applied in subsequent work by those authors (Science, 2015, NIPS, 2015). (ii) We prove the first upper bounds on the number of samples required to answer more general families of queries. These include arbitrary low-sensitivity queries and an important class of optimization queries. As in Dwork et al., our algorithms are based on a connection with algorithmic stability in the form of differential privacy. We extend their work by giving a quantitatively optimal, more general, and simpler proof of their main theorem that stability implies low generalization error. We also study weaker stability guarantees such as bounded KL divergence and total variation distance.
Key facts. Cited by 88 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 Nov 2015.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 19; 2023: 21; 2024: 6; 2025: 12; 2026: 14.
88 papers.
Sort:
By area:
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 218
- 2021Adaptive Machine Unlearningcited by 164
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2023Privacy Auditing with One (1) Training Runcited by 119
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021Learning with User-Level Privacycited by 72
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2021Information-theoretic generalization bounds for black-box learning algorithmscited by 49
- 2022Reproducibility in Learningcited by 44
- 2022Low-Degree Multicalibrationcited by 44
- 2023Stability is Stable: Connections between Replicability, Privacy, and Adaptive Generalizationcited by 42
- 2021Leveraging Public Data for Practical Private Query Releasecited by 39
38 more
- 2023A Unifying Perspective on Multi-Calibration: Game Dynamics for Multi-Objective Learningcited by 29
- 2022Causal Imitation Learning under Temporally Correlated Noisecited by 28
- 2022An Algorithmic Framework for Bias Bountiescited by 19
- 2023Statistical Indistinguishability of Learning Algorithmscited by 17
- 2022On the Privacy Properties of GAN-generated Samplescited by 16
- 2021Estimating informativeness of samples with Smooth Unique Informationcited by 15
- 2021Generalization Bounds for Noisy Iterative Algorithms Using Properties of Additive Noise Channelscited by 15
- 2021Information Complexity and Generalization Boundscited by 14
- 2022Reconciling Individual Probability Forecastscited by 14
- 2022Stability and Generalization for Markov Chain Stochastic Gradient Methodscited by 14
- 2022Multicalibrated Regression for Downstream Fairnesscited by 13
- 2023List and Certificate Complexities in Replicable Learningcited by 13
- 2021On the power of adaptivity in statistical adversariescited by 12
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimationcited by 12
- 2023How Spurious Features Are Memorized: Precise Analysis for Random and NTK Featurescited by 11
- 2025Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacycited by 11
- 2021Differentially Private Coordinate Descent for Composite Empirical Risk Minimizationcited by 10
- 2022What You See is What You Get: Principled Deep Learning via Distributional Generalizationcited by 10
- 2022Valid Inference After Causal Discoverycited by 10
- 2021A Framework for Adversarial Streaming via Differential Privacy and Difference Estimatorscited by 9
- 2022Adaptive Data Analysis with Correlated Observationscited by 9
- 2023On Differential Privacy and Adaptive Data Analysis with Bounded Spacecited by 9
- 2023Subsampling Suffices for Adaptive Data Analysiscited by 9
- 2023Initialization Matters: Privacy-Utility Analysis of Overparameterized Neural Networkscited by 9
- 2021Rip van Winkle's Razor: A Simple Estimate of Overfit to Test Datacited by 8
- 2021Generalization in the Face of Adaptivity: A Bayesian Perspectivecited by 7
- 2022On the Robustness of CountSketch to Adaptive Inputscited by 5
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributionscited by 5
- 2023Adaptive Data Analysis in a Balanced Adversarial Modelcited by 5
- 2023A unifying framework for differentially private quantum algorithmscited by 5
- 2022High-Dimensional Private Empirical Risk Minimization by Greedy Coordinate Descentcited by 4
- 2022Algorithms with More Granular Differential Privacy Guaranteescited by 4
- 2022A Closer Look at the Calibration of Differentially Private Learnerscited by 4
- 2023Generalization Guarantees via Algorithm-dependent Rademacher Complexitycited by 4
- 2024Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updatescited by 4
- 2025Valid Selection among Conformal Setscited by 4
- 2025Panprediction: Optimal Predictions for Any Downstream Task and Losscited by 4
- 2023Streaming Algorithms for Learning with Experts: Deterministic Versus Robustcited by 3
50 most cited of 88 All 88 (JSON)
- 2026Which Self-Improvements Should We Trust? Reliable Self-Improvement When Agents Reuse Their Benchmarks27 Sep 2026
- 2026How Reusable Are Benchmarks with Richer Feedback?26 Sep 2026
- 2026Gaming Without an Attacker: Benchmark Fingerprinting in LLM-Driven Search Under Selection Pressure9 Aug 2026
- 2026Publicly-Verifiable Certificates for Statistical Algorithms17 Jul 2026
- 2026Is Randomness Necessary for Adaptive Data Analysis?8 Jul 2026
- 2026What Fits (Into Few Tokens) Doesn't Overfit: Compression and Generalization in ML Research Agents9 Jun 2026
- 2026From Privacy to Generalization: Linear Max-Information Bounds for Differentially Private Learning Algorithms25 May 2026
- 2026Optimal Reconstruction from Linear Queries19 May 2026
- 2026Differentially Private Auditing Under Strategic Response8 May 2026
- 2026ShakyPrepend: A Multi-Group Learner with Improved Sample Complexity7 Mar 2026
- 2026Computationally Efficient Replicable Learning of Parities and Applications10 Feb 2026
- 2026Tighter Information-Theoretic Generalization Bounds via a Novel Class of Change of Measure Inequalities8 Feb 2026
38 more
- 2026Efficient Adaptive Data Analysis over Dense Distributions7 Feb 2026
- 2026Privacy Implies Stability: Information-Theoretic Generalization Bounds for Quantum Learning1 Feb 2026
- 2025Learning under Distributional Drift: Prequential Reproducibility as an Intrinsic Statistical Resource15 Dec 2025
- 2025Multicalibration Yields Better Matchings14 Nov 2025
- 2025Panprediction: Optimal Predictions for Any Downstream Task and Loss31 Oct 2025
- 2025Private Realizable-to-Agnostic Transformation with Near-Optimal Sample Complexity1 Oct 2025
- 2025Efficiently Attacking Memorization Scores24 Sep 2025
- 2025Gaming and Cooperation in Federated Learning: What Can Happen and How to Monitor It2 Sep 2025
- 2025The Cost of Compression: Tight Quadratic Black-Box Attacks on Sketches for ℓ2 Norm Estimation22 Jul 2025
- 2025Tight Bounds for Answering Adaptively Chosen Concentrated Queries18 Jul 2025
- 2025Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy9 Jul 2025
- 2025Valid Selection among Conformal Sets25 Jun 2025
- 2025Laplace Sample Information: Data Informativeness Through a Bayesian Lens21 May 2025
- 2025Causal Imitation Learning under Expert-Observable and Expert-Unobservable Confounding11 Feb 2025
- 2024Fingerprinting Codes Meet Geometry: Improved Lower Bounds for Private Query Release and Adaptive Data Analysis18 Dec 2024
- 2024The Cost of Replicability in Active Learning12 Dec 2024
- 2024Predicting adaptively chosen observables in quantum systems20 Oct 2024
- 2024Privacy-Aware Randomized Quantization via Linear Programming1 Jun 2024
- 2024Adaptive Data Analysis for Growing Data22 May 2024
- 2024Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates27 Feb 2024
- 2023Information-Theoretic Generalization Bounds for Transductive Learning and its Applications8 Nov 2023
- 2023Adversarially Robust Distributed Count Tracking via Partial Differential Privacy1 Nov 2023
- 2023Initialization Matters: Privacy-Utility Analysis of Overparameterized Neural Networks31 Oct 2023
- 2023Verification of Neural Networks Local Differential Classification Privacy31 Oct 2023
- 2023Online Adaptive Mahalanobis Distance Estimation2 Sep 2023
- 2023A unifying framework for differentially private quantum algorithms10 Jul 2023
- 2023Generalization Guarantees via Algorithm-dependent Rademacher Complexity4 Jul 2023
- 2023Adaptive Data Analysis in a Balanced Adversarial Model24 May 2023
- 2023Statistical Indistinguishability of Learning Algorithms23 May 2023
- 2023How Spurious Features Are Memorized: Precise Analysis for Random and NTK Features20 May 2023
- 2023Privacy Auditing with One (1) Training Run15 May 2023
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributions13 Apr 2023
- 2023List and Certificate Complexities in Replicable Learning5 Apr 2023
- 2023Stability is Stable: Connections between Replicability, Privacy, and Adaptive Generalization22 Mar 2023
- 2023PRIMO: Private Regression in Multiple Outcomes7 Mar 2023
- 2023Streaming Algorithms for Learning with Experts: Deterministic Versus Robust3 Mar 2023
- 2023A Unifying Perspective on Multi-Calibration: Game Dynamics for Multi-Objective Learning21 Feb 2023
- 2023Subsampling Suffices for Adaptive Data Analysis17 Feb 2023
50 newest of 88 All 88 (JSON)
- 2021Adaptive Machine Unlearningcited by 164
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2022On the Privacy Properties of GAN-generated Samplescited by 16
- 2022On the Privacy Properties of GAN-generated Samples3 Jun 2022
- 2021Adaptive Machine Unlearning8 Jun 2021
- 2021Machine Unlearning via Algorithmic Stability25 Feb 2021
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 218
- 2023Privacy Auditing with One (1) Training Runcited by 119
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021Learning with User-Level Privacycited by 72
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2021Information-theoretic generalization bounds for black-box learning algorithmscited by 49
- 2022Reproducibility in Learningcited by 44
- 2022Low-Degree Multicalibrationcited by 44
- 2023Stability is Stable: Connections between Replicability, Privacy, and Adaptive Generalizationcited by 42
- 2021Leveraging Public Data for Practical Private Query Releasecited by 39
- 2023A Unifying Perspective on Multi-Calibration: Game Dynamics for Multi-Objective Learningcited by 29
- 2022An Algorithmic Framework for Bias Bountiescited by 19
12 most cited of 82 All 82 (JSON)
- 2026Which Self-Improvements Should We Trust? Reliable Self-Improvement When Agents Reuse Their Benchmarks27 Sep 2026
- 2026How Reusable Are Benchmarks with Richer Feedback?26 Sep 2026
- 2026Gaming Without an Attacker: Benchmark Fingerprinting in LLM-Driven Search Under Selection Pressure9 Aug 2026
- 2026Publicly-Verifiable Certificates for Statistical Algorithms17 Jul 2026
- 2026Is Randomness Necessary for Adaptive Data Analysis?8 Jul 2026
- 2026From Privacy to Generalization: Linear Max-Information Bounds for Differentially Private Learning Algorithms25 May 2026
- 2026Optimal Reconstruction from Linear Queries19 May 2026
- 2026Differentially Private Auditing Under Strategic Response8 May 2026
- 2026ShakyPrepend: A Multi-Group Learner with Improved Sample Complexity7 Mar 2026
- 2026Computationally Efficient Replicable Learning of Parities and Applications10 Feb 2026
- 2026Tighter Information-Theoretic Generalization Bounds via a Novel Class of Change of Measure Inequalities8 Feb 2026
- 2026Efficient Adaptive Data Analysis over Dense Distributions7 Feb 2026
12 newest of 82 All 82 (JSON)