Renyi Differential Privacy
Not on the map. Why?
Cited by 34 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
We propose a natural relaxation of differential privacy based on the Renyi divergence. Closely related notions have appeared in several recent papers that analyzed composition of differentially private mechanisms. We argue that the useful analytical tool can be used as a privacy definition, compactly and accurately representing guarantees on the tails of the privacy loss. We demonstrate that the new definition shares many important properties with the standard definition of differential privacy, while additionally allowing tighter analysis of composite heterogeneous mechanisms.
Key facts. Cited by 643 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 Feb 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 113; 2022: 152; 2023: 133; 2024: 83; 2025: 85; 2026: 77.
643 papers.
Sort:
By area:
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 193
- 2021Numerical Composition of Differential Privacycited by 174
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 169
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2022Reconstructing Training Data with Informed Adversariescited by 143
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 137
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 124
38 more
- 2022Privacy for Free: How does Dataset Condensation Help Privacy?cited by 119
- 2023Privacy Auditing with One (1) Training Runcited by 119
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022Differentially Private Diffusion Modelscited by 118
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2021Large-Scale Differentially Private BERTcited by 117
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2022Automatic Clipping: Differentially Private Deep Learning Made Easier and Strongercited by 87
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 83
- 2021Differentially Private Federated Learning on Heterogeneous Datacited by 74
- 2021Differential Privacy Dynamics of Langevin Diffusion and Noisy Gradient Descentcited by 71
- 2022CTAB-GAN+: Enhancing Tabular Data Synthesiscited by 70
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2021The Skellam Mechanism for Differentially Private Federated Learningcited by 66
- 2022Synthetic Data -- what, why and how?cited by 66
- 2022Differentially Private Optimization on Large Model at Small Costcited by 65
- 2021Selective Differential Privacy for Language Modelingcited by 61
- 2022Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Losscited by 60
- 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directionscited by 58
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 58
- 2021Decentralized Federated Learning through Proxy Model Sharingcited by 56
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 56
- 2021Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergencecited by 54
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2022TAN Without a Burn: Scaling Laws of DP-SGDcited by 51
- 2021Membership Inference Attack Susceptibility of Clinical Language Modelscited by 50
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributionscited by 50
- 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearningcited by 48
- 2022Private Convex Optimization via Exponential Mechanismcited by 47
- 2022GAP: Differentially Private Graph Neural Networks with Aggregation Perturbationcited by 46
- 2022Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)cited by 45
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023Faster high-accuracy log-concave sampling via algorithmic warm startscited by 44
50 most cited of 643 All 643 (JSON)
- 2026Certification-Based Differentially Private Learning30 Sep 2026
- 2026Where Privacy Belongs: Placement Diagnosis and Certified Selection for Private Counterfactual Explanations on Graphs29 Sep 2026
- 2026A Sharp Transition in Data Reconstruction under Differential Privacy29 Sep 2026
- 2026Private Decentralized Optimization with Noise Reduction and Bias Correction23 Sep 2026
- 2026Gap-Free Streaming PCA Beyond Rank-One Updates: Near-Optimal Rates and Applications to Differential Privacy22 Sep 2026
- 2026Thin-shell stability of Gaussian cooling: logconcave sampling with sesteric complexity from a cold start14 Sep 2026
- 2026PAC-Private Autoregressive Generation: Calibrating Noise to Ensemble Disagreement4 Sep 2026
- 2026RegionFed: Federated Learning for Personalized Query Understanding in Heterogeneous Retail Environments4 Sep 2026
- 2026Privacy-Preserving Heterogeneous Multi-LLM Federated Inference for Cognitive Diagnosis1 Sep 2026
- 2026Private Computation Space: Experience with Trusted Multi-Cluster Federated Learning for Agriculture1 Sep 2026
- 2026Differentially Private Paired Table-Image Multimodal Synthesis1 Sep 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
38 more
- 2026When Privacy Hurts Mergeability: Geometry-Aware Model Merging under Differential Privacy27 Aug 2026
- 2026Spectral Gradient Orthogonalization Improves Differentially Private Training at Scale18 Aug 2026
- 2026PriDyG: Privacy-preserving Dynamic Graph Inference with LLM-GNN Collaboration4 Aug 2026
- 2026Similarity Weighted Aggregation with Global Differential Privacy for Federated Brain Lesion Segmentation1 Aug 2026
- 2026DP-IVON-Gradsq: Differentially Private Squared-Gradient Improved Variational Online Newton26 Jul 2026
- 2026Multi-Agent Privacy Game in Federated Learning: A Unified Mean-Field View25 Jul 2026
- 2026Equivariant Quantum Clustering with Differential Privacy: Parameter-Efficient Privacy-Preserving Analysis Across Heterogeneous Sensitive Datasets9 Jul 2026
- 2026Continual Learning With Participation Privacy: An Auditable Buffering-Aggregation Recipe8 Jul 2026
- 2026Recovering Clinical Utility Under Differential Privacy: Empirical Validation of Adaptive Federated Aggregation on Heterogeneous Cardiovascular Datasets7 Jul 2026
- 2026Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacy7 Jul 2026
- 2026TL++: Accuracy and Privacy Preserving Traversal Learning for Distributed Intelligent Systems24 Jun 2026
- 2026Predictability as a Fine-Grained Measure for Privacy18 Jun 2026
- 2026Privacy-Preserving Federated Autoencoder for ECG Anomaly Detection on Edge Devices10 Jun 2026
- 2026When Do Fewer Coordinates Suffice in DP-SGD?3 Jun 2026
- 2026Token Budgets: An Empirical Catalog of 63 LLM-Agent Budget-Overrun Incidents, with an Affine-Typed Rust Mitigation as a Case Study2 Jun 2026
- 2026Cross-modal linkage risk in clinical vision-language models1 Jun 2026
- 2026Randomized Least Squares Value Iteration itself is Joint Differentially Private1 Jun 2026
- 2026Canonicalized Stable-List Replay for Private Federated Continual Learning over Language-Model Embeddings29 May 2026
- 2026Detectability in Diversity: Improved Canary Crafting for Privacy Auditing in One Run26 May 2026
- 2026PATE-TabTransGAN: Differentially Private Synthetic Tabular Data Generation via Transformer-Based Student Discrimination26 May 2026
- 2026Provably Communication-Efficient and Privacy-Preserving Federated Graph Neural Networks25 May 2026
- 2026From Privacy to Generalization: Linear Max-Information Bounds for Differentially Private Learning Algorithms25 May 2026
- 2026Optimal Guarantees for Auditing R'enyi Differentially Private Machine Learning21 May 2026
- 2026Auditing Privacy in Multi-Tenant RAG under Account Collusion19 May 2026
- 2026DP-Muon: Differentially Private Optimization via Matrix-Orthogonalized Momentum13 May 2026
- 2026Unlearning with Asymmetric Sources: Improved Unlearning-Utility Trade-off with Public Data11 May 2026
- 2026DP-LAC: Lightweight Adaptive Clipping for Differentially Private Federated Fine-tuning of Language Models11 May 2026
- 2026Deep Learning under Fractional-Order Differential Privacy11 May 2026
- 2026Differentially Private Auditing Under Strategic Response8 May 2026
- 2026PACZero: PAC-Private Fine-Tuning of Language Models via Sign Quantization7 May 2026
- 2026Adaptive Selection of LoRA Components in Privacy-Preserving Federated Learning7 May 2026
- 2026Graph Reconstruction from Differentially Private GNN Explanations5 May 2026
- 2026Separable Expert Architecture: Toward Privacy-Preserving LLM Personalization via Composable Adapters and Deletable User Proxies23 Apr 2026
- 2026Differentially Private Model Merging22 Apr 2026
- 2026IRIS: Interpolative R'enyi Iterative Self-play for Large Language Model Fine-Tuning22 Apr 2026
- 2026PPEDCRF: Dynamic-CRF-Guided Selective Perturbation for Background-Based Location Privacy in Video Sequences18 Apr 2026
- 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacy17 Apr 2026
- 2026Differentially Private Language Generation and Identification in the Limit9 Apr 2026
50 newest of 643 All 643 (JSON)
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 137
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 124
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 58
- 2021Membership Inference Attack Susceptibility of Clinical Language Modelscited by 50
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearningcited by 48
- 2023Bounding Training Data Reconstruction in DP-SGDcited by 42
- 2023SAFE: Machine Unlearning With Shard Graphscited by 28
- 2022Optimal Membership Inference Bounds for Adaptive Composition of Sampled Gaussian Mechanismscited by 19
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matchingcited by 18
12 most cited of 33 All 33 (JSON)
- 2026Detectability in Diversity: Improved Canary Crafting for Privacy Auditing in One Run26 May 2026
- 2026Unlearning with Asymmetric Sources: Improved Unlearning-Utility Trade-off with Public Data11 May 2026
- 2026Separable Expert Architecture: Toward Privacy-Preserving LLM Personalization via Composable Adapters and Deletable User Proxies23 Apr 2026
- 2026MPU: Towards Secure and Privacy-Preserving Knowledge Unlearning for Large Language Models27 Feb 2026
- 2026Certified Per-Instance Unlearning Using Individual Sensitivity Bounds17 Feb 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning8 Jan 2026
- 2025DP-Fusion: Token-Level Differentially Private Inference for Large Language Models6 Jul 2025
- 2025Online Learning and Unlearning13 May 2025
- 2025MCMC for Bayesian estimation of Differential Privacy from Membership Inference Attacks23 Apr 2025
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matching30 Oct 2024
- 2024Efficient Federated Unlearning under Plausible Deniability13 Oct 2024
12 newest of 33 All 33 (JSON)
- 2022Differentially Private Diffusion Modelscited by 118
- 2025A Comprehensive Survey of Synthetic Tabular Data Generationcited by 27
- 2025Diffusion Models and the Manifold Hypothesis: Log-Domain Smoothing is Geometry Adaptivecited by 20
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 12
- 2024Learning Differentially Private Diffusion Models via Stochastic Adversarial Distillationcited by 2
- 2024Visual Privacy Auditing with Diffusion Modelscited by 1
- 2025DP-DocLDM: Differentially Private Document Image Generation using Latent Diffusion Modelscited by 1
- 2025Defending Diffusion Models Against Membership Inference Attacks via Higher-Order Langevin Dynamicscited by 1
- 2025PrivORL: Differentially Private Synthetic Dataset for Offline Reinforcement Learningcited by 1
- 2025PrivORL: Differentially Private Synthetic Dataset for Offline Reinforcement Learning8 Dec 2025
- 2025Diffusion Models and the Manifold Hypothesis: Log-Domain Smoothing is Geometry Adaptive2 Oct 2025
- 2025Defending Diffusion Models Against Membership Inference Attacks via Higher-Order Langevin Dynamics17 Sep 2025
- 2025DP-DocLDM: Differentially Private Document Image Generation using Latent Diffusion Models6 Aug 2025
- 2025A Comprehensive Survey of Synthetic Tabular Data Generation23 Apr 2025
- 2024Learning Differentially Private Diffusion Models via Stochastic Adversarial Distillation27 Aug 2024
- 2024Visual Privacy Auditing with Diffusion Models12 Mar 2024
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining19 Oct 2023
- 2022Differentially Private Diffusion Models18 Oct 2022
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacycited by 10
- 2025Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generationcited by 8
- 2024DP-RDM: Adapting Diffusion Models to Private Domains Without Fine-Tuningcited by 4
- 2025RAPID: Retrieval Augmented Training of Differentially Private Diffusion Modelscited by 2
- 2025Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Privatecited by 2
- 2026Differentially Private Retrieval-Augmented Generationcited by 2
- 2026Differentially Private Retrieval-Augmented Generation16 Feb 2026
- 2025Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private10 Nov 2025
- 2025Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation5 Aug 2025
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy30 Jun 2025
- 2025RAPID: Retrieval Augmented Training of Differentially Private Diffusion Models18 Feb 2025
- 2024DP-RDM: Adapting Diffusion Models to Private Domains Without Fine-Tuning21 Mar 2024
- 2024Generative AI for Synthetic Data Across Multiple Medical Modalities: A Systematic Review of Recent Developments and Challengescited by 24
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generationcited by 2
- 2024SAFES: Sequential Privacy and Fairness Enhancing Data Synthesis for Responsible AIcited by 0
- 2026IRIS: Interpolative R'enyi Iterative Self-play for Large Language Model Fine-Tuningcited by 0
- 2026IRIS: Interpolative R'enyi Iterative Self-play for Large Language Model Fine-Tuning22 Apr 2026
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generation8 Apr 2026
- 2024SAFES: Sequential Privacy and Fairness Enhancing Data Synthesis for Responsible AI14 Nov 2024
- 2024Generative AI for Synthetic Data Across Multiple Medical Modalities: A Systematic Review of Recent Developments and Challenges27 Jun 2024
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 193
- 2021Numerical Composition of Differential Privacycited by 174
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 169
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2022Reconstructing Training Data with Informed Adversariescited by 143
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2022Privacy for Free: How does Dataset Condensation Help Privacy?cited by 119
- 2023Privacy Auditing with One (1) Training Runcited by 119
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2021Large-Scale Differentially Private BERTcited by 117
12 most cited of 584 All 584 (JSON)
- 2026Certification-Based Differentially Private Learning30 Sep 2026
- 2026Where Privacy Belongs: Placement Diagnosis and Certified Selection for Private Counterfactual Explanations on Graphs29 Sep 2026
- 2026A Sharp Transition in Data Reconstruction under Differential Privacy29 Sep 2026
- 2026Private Decentralized Optimization with Noise Reduction and Bias Correction23 Sep 2026
- 2026Gap-Free Streaming PCA Beyond Rank-One Updates: Near-Optimal Rates and Applications to Differential Privacy22 Sep 2026
- 2026Thin-shell stability of Gaussian cooling: logconcave sampling with sesteric complexity from a cold start14 Sep 2026
- 2026PAC-Private Autoregressive Generation: Calibrating Noise to Ensemble Disagreement4 Sep 2026
- 2026RegionFed: Federated Learning for Personalized Query Understanding in Heterogeneous Retail Environments4 Sep 2026
- 2026Privacy-Preserving Heterogeneous Multi-LLM Federated Inference for Cognitive Diagnosis1 Sep 2026
- 2026Private Computation Space: Experience with Trusted Multi-Cluster Federated Learning for Agriculture1 Sep 2026
- 2026Differentially Private Paired Table-Image Multimodal Synthesis1 Sep 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
12 newest of 584 All 584 (JSON)