Prochlo: Strong Privacy for Analytics in the Crowd
Not on the map. Why?
Abstract (arXiv)
The large-scale monitoring of computer users' software activities has become commonplace, e.g., for application telemetry, error reporting, or demographic profiling. This paper describes a principled systems architecture---Encode, Shuffle, Analyze (ESA)---for performing such monitoring with high utility while also protecting user privacy. The ESA design, and its Prochlo implementation, are informed by our practical experiences with an existing, large deployment of privacy-preserving software monitoring. (cont.; see the paper)
Key facts. Cited by 51 papers in the map (data through 14 Oct 2026). First posted on arXiv 2 Oct 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 24; 2022: 14; 2023: 10; 2024: 0; 2025: 2; 2026: 1.
51 papers.
Sort:
- 2021Federated Learning with Buffered Asynchronous Aggregationcited by 190
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 128
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 127
- 2023Foundation Models and Fair Usecited by 116
- 2021On Large-Cohort Training for Federated Learningcited by 74
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 45
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2022Optimal Algorithms for Mean Estimation under Local Differential Privacycited by 36
- 2021Differentially Private Federated Bayesian Optimization with Distributed Explorationcited by 32
- 2022Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacycited by 29
- 2021Lossless Compression of Efficient Private Local Randomizerscited by 27
38 more
- 2022Shuffle Private Linear Contextual Banditscited by 27
- 2022Private Non-Convex Federated Learning Without a Trusted Servercited by 26
- 2022Almost Tight Error Bounds on Differentially Private Continual Countingcited by 26
- 2021The Internet of Federated Things (IoFT): A Vision for the Future and In-depth Survey of Data-driven Approaches for Federated Learningcited by 23
- 2021Dopamine: Differentially Private Federated Learning on Medical Datacited by 18
- 2021Shuffle Private Stochastic Convex Optimizationcited by 17
- 2021Privacy Amplification via Shuffling for Linear Contextual Banditscited by 17
- 2021On the Renyi Differential Privacy of the Shuffle Modelcited by 16
- 2023Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregationcited by 16
- 2021Privately Learning Mixtures of Axis-Aligned Gaussianscited by 13
- 2022Private Convex Optimization in General Normscited by 13
- 2021Towards Sparse Federated Analytics: Location Heatmaps under Distributed Differential Privacy with Secure Aggregationcited by 10
- 2021User-Level Private Learning via Correlated Samplingcited by 9
- 2022Private Frequency Estimation via Projective Geometrycited by 9
- 2021Separation of Powers in Federated Learningcited by 8
- 2021Byzantine-robust Federated Learning through Spatial-temporal Analysis of Local Model Updatescited by 8
- 2021A Central Limit Theorem for Differentially Private Query Answeringcited by 7
- 2022Network Shuffling: Privacy Amplification via Random Walkscited by 6
- 2023Samplable Anonymous Aggregation for Private Federated Data Analysiscited by 6
- 2022Differential Secrecy for Distributed Data and Applications to Robust Differentially Secure Vector Summationcited by 5
- 2022Group privacy for personalized federated learningcited by 5
- 2022Hierarchical Federated Learning with Privacycited by 4
- 2022Shuffle Gaussian Mechanism for Differential Privacycited by 4
- 2023Differentially Private Multi-Site Treatment Effect Estimationcited by 4
- 2023(Private) Kernelized Bandits with Distributed Biased Feedbackcited by 3
- 2021Differentially-Private Sublinear-Time Clusteringcited by 2
- 2023Concurrent Shuffle Differential Privacy Under Continual Observationcited by 2
- 2021The Sample Complexity of Distribution-Free Parity Learning in the Robust Shuffle Modelcited by 1
- 2023Fingerprint Attack: Client De-Anonymization in Federated Learningcited by 1
- 2025SoK: Data Minimization in Machine Learningcited by 1
- 2025BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprintscited by 1
- 2021A Shuffling Framework for Local Differential Privacycited by 0
- 2021Uniformity Testing in the Shuffle Model: Simpler, Better, Fastercited by 0
- 2021Infinitely Divisible Noise in the Low Privacy Regimecited by 0
- 2021Mitigating Leakage from Data Dependent Communications in Decentralized Computing using Differential Privacycited by 0
- 2022Privacy Amplification via Shuffled Check-Inscited by 0
- 2023When approximate design for fast homomorphic computation provides differential privacy guaranteescited by 0
- 2023Robust and differentially private stochastic linear banditscited by 0
50 most cited of 51 All 51 (JSON)
- 2026SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy14 Jan 2026
- 2025BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints6 Sep 2025
- 2025SoK: Data Minimization in Machine Learning14 Aug 2025
- 2023Differentially Private Multi-Site Treatment Effect Estimation10 Oct 2023
- 2023Fingerprint Attack: Client De-Anonymization in Federated Learning12 Sep 2023
- 2023Samplable Anonymous Aggregation for Private Federated Data Analysis27 Jul 2023
- 2023Robust and differentially private stochastic linear bandits23 Apr 2023
- 2023When approximate design for fast homomorphic computation provides differential privacy guarantees6 Apr 2023
- 2023Foundation Models and Fair Use28 Mar 2023
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy1 Mar 2023
- 2023Concurrent Shuffle Differential Privacy Under Continual Observation29 Jan 2023
- 2023(Private) Kernelized Bandits with Distributed Biased Feedback28 Jan 2023
38 more
- 2023Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation9 Jan 2023
- 2022Almost Tight Error Bounds on Differentially Private Continual Counting9 Nov 2022
- 2022Composition of Differential Privacy & Privacy Amplification by Subsampling2 Oct 2022
- 2022Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacy9 Aug 2022
- 2022Private Convex Optimization in General Norms18 Jul 2022
- 2022Shuffle Gaussian Mechanism for Differential Privacy20 Jun 2022
- 2022Hierarchical Federated Learning with Privacy10 Jun 2022
- 2022Group privacy for personalized federated learning7 Jun 2022
- 2022Privacy Amplification via Shuffled Check-Ins7 Jun 2022
- 2022Optimal Algorithms for Mean Estimation under Local Differential Privacy5 May 2022
- 2022Network Shuffling: Privacy Amplification via Random Walks8 Apr 2022
- 2022Private Non-Convex Federated Learning Without a Trusted Server13 Mar 2022
- 2022Private Frequency Estimation via Projective Geometry1 Mar 2022
- 2022Differential Secrecy for Distributed Data and Applications to Robust Differentially Secure Vector Summation22 Feb 2022
- 2022Shuffle Private Linear Contextual Bandits11 Feb 2022
- 2021Differentially-Private Sublinear-Time Clustering27 Dec 2021
- 2021Mitigating Leakage from Data Dependent Communications in Decentralized Computing using Differential Privacy23 Dec 2021
- 2021Privacy Amplification via Shuffling for Linear Contextual Bandits11 Dec 2021
- 2021Private Robust Estimation by Stabilizing Convex Relaxations7 Dec 2021
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Private6 Dec 2021
- 2021The Internet of Federated Things (IoFT): A Vision for the Future and In-depth Survey of Data-driven Approaches for Federated Learning9 Nov 2021
- 2021Towards Sparse Federated Analytics: Location Heatmaps under Distributed Differential Privacy with Secure Aggregation3 Nov 2021
- 2021Differentially Private Federated Bayesian Optimization with Distributed Exploration27 Oct 2021
- 2021User-Level Private Learning via Correlated Sampling21 Oct 2021
- 2021Infinitely Divisible Noise in the Low Privacy Regime13 Oct 2021
- 2021Uniformity Testing in the Shuffle Model: Simpler, Better, Faster20 Aug 2021
- 2021Byzantine-robust Federated Learning through Spatial-temporal Analysis of Local Model Updates3 Jul 2021
- 2021Shuffle Private Stochastic Convex Optimization17 Jun 2021
- 2021On Large-Cohort Training for Federated Learning15 Jun 2021
- 2021Federated Learning with Buffered Asynchronous Aggregation11 Jun 2021
- 2021A Shuffling Framework for Local Differential Privacy11 Jun 2021
- 2021Privately Learning Mixtures of Axis-Aligned Gaussians3 Jun 2021
- 2021Separation of Powers in Federated Learning19 May 2021
- 2021On the Renyi Differential Privacy of the Shuffle Model11 May 2021
- 2021The Sample Complexity of Distribution-Free Parity Learning in the Robust Shuffle Model29 Mar 2021
- 2021A Central Limit Theorem for Differentially Private Query Answering15 Mar 2021
- 2021Lossless Compression of Efficient Private Local Randomizers24 Feb 2021
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation12 Feb 2021
50 newest of 51 All 51 (JSON)
- 2021Federated Learning with Buffered Asynchronous Aggregationcited by 190
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 128
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 127
- 2023Foundation Models and Fair Usecited by 116
- 2021On Large-Cohort Training for Federated Learningcited by 74
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 45
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2022Optimal Algorithms for Mean Estimation under Local Differential Privacycited by 36
- 2021Differentially Private Federated Bayesian Optimization with Distributed Explorationcited by 32
- 2022Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacycited by 29
- 2021Lossless Compression of Efficient Private Local Randomizerscited by 27
12 most cited of 51 All 51 (JSON)
- 2026SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy14 Jan 2026
- 2025BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints6 Sep 2025
- 2025SoK: Data Minimization in Machine Learning14 Aug 2025
- 2023Differentially Private Multi-Site Treatment Effect Estimation10 Oct 2023
- 2023Fingerprint Attack: Client De-Anonymization in Federated Learning12 Sep 2023
- 2023Samplable Anonymous Aggregation for Private Federated Data Analysis27 Jul 2023
- 2023Robust and differentially private stochastic linear bandits23 Apr 2023
- 2023When approximate design for fast homomorphic computation provides differential privacy guarantees6 Apr 2023
- 2023Foundation Models and Fair Use28 Mar 2023
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy1 Mar 2023
- 2023Concurrent Shuffle Differential Privacy Under Continual Observation29 Jan 2023
- 2023(Private) Kernelized Bandits with Distributed Biased Feedback28 Jan 2023
12 newest of 51 All 51 (JSON)