Understanding the Sparse Vector Technique for Differential Privacy
Not on the map. Why?
Abstract (arXiv)
The Sparse Vector Technique (SVT) is a fundamental technique for satisfying differential privacy and has the unique quality that one can output some query answers without apparently paying any privacy cost. SVT has been used in both the interactive setting, where one tries to answer a sequence of queries that are not known ahead of the time, and in the non-interactive setting, where all queries are known. Because of the potential savings on privacy budget, many variants for SVT have been proposed and employed in privacy-preserving data mining and publishing. However, most variants of SVT are actually not private. In this paper, we analyze these errors and identify the misunderstandings that likely contribute to them. We also propose a new version of SVT that provides better utility, and introduce an effective technique to improve the performance of SVT. These enhancements can be applied to improve utility in the interactive setting. Through both analytical and experimental comparisons, we show that, in the non-interactive setting (but not the interactive setting), the SVT technique is unnecessary, as it can be replaced by the Exponential Mechanism (EM) with better accuracy.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). First posted on arXiv 5 Mar 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 4; 2022: 5; 2023: 7; 2024: 3; 2025: 4; 2026: 4.
27 papers.
Sort:
By area:
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 224
- 2022Do Gradient Inversion Attacks Make Federated Learning Unsafe?cited by 44
- 2023Unleashing the Power of Randomization in Auditing Differentially Private MLcited by 20
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuationcited by 19
- 2021Wide Network Learning with Differential Privacycited by 17
- 2021Data synthesis and adversarial networks: A review and meta-analysis in cancer imagingcited by 15
- 2022Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATEcited by 9
- 2023Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embeddingcited by 7
- 2023Unbounded Differentially Private Quantile and Maximum Estimationcited by 6
- 2025The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditingcited by 5
- 2025Sequentially Auditing Differential Privacycited by 5
- 2022Brownian Noise Reduction: Maximizing Privacy Subject to Accuracy Constraintscited by 3
15 more
- 2024On the Privacy of Selection Mechanisms with Gaussian Noisecited by 3
- 2022Answering Private Linear Queries Adaptively using the Common Mechanismcited by 2
- 2026Regularized f-Divergence Kernel Testscited by 2
- 2021A unified interpretation of the Gaussian mechanism for differential privacy through the sensitivity indexcited by 1
- 2023Exploratory Analysis of Federated Learning Methods with Differential Privacy on MIMIC-IIIcited by 1
- 2023On the Computational Complexity of Private High-dimensional Model Selectioncited by 1
- 2024Unleash the Power of Ellipsis: Accuracy-enhanced Sparse Vector Technique with Exponential Noisecited by 1
- 2024VerifiableFL: Verifiable Claims for Federated Learning using Exclavescited by 1
- 2021Learning Differentially Private Mechanismscited by 0
- 2023Instance-Specific Asymmetric Sensitivity in Differential Privacycited by 0
- 2025Nearly-Linear Time Private Hypothesis Selection with the Optimal Approximation Factorcited by 0
- 2025Continual Release of Densest Subgraphs: Privacy Amplification & Sublinear Space via Subsamplingcited by 0
- 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacycited by 0
- 2026Lumberjack: Better Differentially Private Random Forests through Heavy Hitter Detection in Treescited by 0
- 2026PrivCert: Certifying Statement Support under Differential Privacycited by 0
- 2026PrivCert: Certifying Statement Support under Differential Privacy30 Sep 2026
- 2026Lumberjack: Better Differentially Private Random Forests through Heavy Hitter Detection in Trees21 May 2026
- 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacy17 Apr 2026
- 2026Regularized f-Divergence Kernel Tests27 Jan 2026
- 2025Continual Release of Densest Subgraphs: Privacy Amplification & Sublinear Space via Subsampling13 Oct 2025
- 2025Sequentially Auditing Differential Privacy8 Sep 2025
- 2025The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing20 Jun 2025
- 2025Nearly-Linear Time Private Hypothesis Selection with the Optimal Approximation Factor1 Jun 2025
- 2024VerifiableFL: Verifiable Claims for Federated Learning using Exclaves13 Dec 2024
- 2024Unleash the Power of Ellipsis: Accuracy-enhanced Sparse Vector Technique with Exponential Noise29 Jul 2024
- 2024On the Privacy of Selection Mechanisms with Gaussian Noise9 Feb 2024
- 2023Instance-Specific Asymmetric Sensitivity in Differential Privacy2 Nov 2023
15 more
- 2023On the Computational Complexity of Private High-dimensional Model Selection11 Oct 2023
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuation30 Aug 2023
- 2023Unleashing the Power of Randomization in Auditing Differentially Private ML29 May 2023
- 2023Unbounded Differentially Private Quantile and Maximum Estimation2 May 2023
- 2023Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding6 Apr 2023
- 2023Exploratory Analysis of Federated Learning Methods with Differential Privacy on MIMIC-III8 Feb 2023
- 2022Answering Private Linear Queries Adaptively using the Common Mechanism30 Nov 2022
- 2022Brownian Noise Reduction: Maximizing Privacy Subject to Accuracy Constraints15 Jun 2022
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scale28 Apr 2022
- 2022Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATE30 Mar 2022
- 2022Do Gradient Inversion Attacks Make Federated Learning Unsafe?14 Feb 2022
- 2021A unified interpretation of the Gaussian mechanism for differential privacy through the sensitivity index22 Sep 2021
- 2021Data synthesis and adversarial networks: A review and meta-analysis in cancer imaging20 Jul 2021
- 2021Wide Network Learning with Differential Privacy1 Mar 2021
- 2021Learning Differentially Private Mechanisms4 Jan 2021
- 2026Regularized f-Divergence Kernel Testscited by 2
- 2026Regularized f-Divergence Kernel Tests27 Jan 2026
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 224
- 2022Do Gradient Inversion Attacks Make Federated Learning Unsafe?cited by 44
- 2023Unleashing the Power of Randomization in Auditing Differentially Private MLcited by 20
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuationcited by 19
- 2021Wide Network Learning with Differential Privacycited by 17
- 2021Data synthesis and adversarial networks: A review and meta-analysis in cancer imagingcited by 15
- 2022Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATEcited by 9
- 2023Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embeddingcited by 7
- 2023Unbounded Differentially Private Quantile and Maximum Estimationcited by 6
- 2025The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditingcited by 5
- 2025Sequentially Auditing Differential Privacycited by 5
- 2022Brownian Noise Reduction: Maximizing Privacy Subject to Accuracy Constraintscited by 3
12 most cited of 25 All 25 (JSON)
- 2026PrivCert: Certifying Statement Support under Differential Privacy30 Sep 2026
- 2026Lumberjack: Better Differentially Private Random Forests through Heavy Hitter Detection in Trees21 May 2026
- 2025Continual Release of Densest Subgraphs: Privacy Amplification & Sublinear Space via Subsampling13 Oct 2025
- 2025Sequentially Auditing Differential Privacy8 Sep 2025
- 2025The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing20 Jun 2025
- 2025Nearly-Linear Time Private Hypothesis Selection with the Optimal Approximation Factor1 Jun 2025
- 2024VerifiableFL: Verifiable Claims for Federated Learning using Exclaves13 Dec 2024
- 2024Unleash the Power of Ellipsis: Accuracy-enhanced Sparse Vector Technique with Exponential Noise29 Jul 2024
- 2024On the Privacy of Selection Mechanisms with Gaussian Noise9 Feb 2024
- 2023Instance-Specific Asymmetric Sensitivity in Differential Privacy2 Nov 2023
- 2023On the Computational Complexity of Private High-dimensional Model Selection11 Oct 2023
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuation30 Aug 2023
12 newest of 25 All 25 (JSON)