Learning Differentially Private Recurrent Language Models
Not on the map. Why?
Abstract (arXiv)
We demonstrate that it is possible to train large recurrent language models with user-level differential privacy guarantees with only a negligible cost in predictive accuracy. Our work builds on recent advances in the training of deep networks on user-partitioned data and privacy accounting for stochastic gradient descent. In particular, we add user-level privacy protection to the federated averaging algorithm, which makes "large step" updates from user-level data. Our work demonstrates that given a dataset with a sufficiently large number of users (a requirement easily met by even small internet-scale datasets), achieving differential privacy comes at the cost of increased computation, rather than in decreased utility as in most prior work. We find that our private LSTM language models are quantitatively and qualitatively similar to un-noised models when trained on a large dataset.
Key facts. Cited by 32 papers in the map (data through 7 Oct 2026). First posted on arXiv 18 Oct 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 8; 2022: 4; 2023: 5; 2024: 9; 2025: 6.
32 papers.
Sort:
By area:
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2021Large-Scale Differentially Private BERTcited by 117
- 2021Public Data-Assisted Mirror Descent for Private Model Trainingcited by 49
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2022CrowdGuard: Federated Backdoor Detection in Federated Learningcited by 26
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Modelscited by 24
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learningcited by 23
- 2021Applications of Federated Learning in Smart Cities: Recent Advances, Taxonomy, and Open Challengescited by 17
- 2021Generative Adversarial Networks: A Survey Towards Private and Secure Applicationscited by 15
- 2021Towards Causal Federated Learning For Enhanced Robustness and Privacycited by 14
20 more
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directionscited by 10
- 2024Federated Learning under Periodic Client Participation and Heterogeneous Data: A New Communication-Efficient Algorithm and Analysiscited by 8
- 2025SafeSplit: A Novel Defense Against Client-Side Backdoor Attacks in Split Learning (Full Version)cited by 7
- 2022Hierarchical Federated Learning with Privacycited by 4
- 2025RewardDS: Privacy-Preserving Fine-Tuning for Large Language Models via Reward Driven Data Synthesiscited by 3
- 2021Utility Fairness for the Differentially Private Federated Learningcited by 2
- 2023LatticeGen: A Cooperative Framework which Hides Generated Text in a Lattice for Privacy-Aware Generation on Cloudcited by 2
- 2023Privacy-preserving design of graph neural networks with applications to vertical federated learningcited by 2
- 2024Differentially Private Federated Learning: Servers Trustworthiness, Estimation, and Statistical Inferencecited by 2
- 2024Federated Learning for Blind Image Super-Resolutioncited by 2
- 2024QuanCrypt-FL: Quantized Homomorphic Encryption with Pruning for Secure Federated Learningcited by 2
- 2025Model Inversion Attacks on Llama 3: Extracting PII from Large Language Modelscited by 2
- 2021Private Cross-Silo Federated Learning for Extracting Vaccine Adverse Event Mentionscited by 1
- 2023Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigationscited by 1
- 2024Can large language models be privacy preserving and fair medical coders?cited by 1
- 2025Enhancing Privacy in the Early Detection of Sexual Predators Through Federated Learning and Differential Privacycited by 1
- 2022Protecting Data from all Parties: Combining FHE and DP in Federated Learningcited by 0
- 2024Upcycling Noise for Federated Unlearningcited by 0
- 2025Structure-Preference Enabled Graph Embedding Generation under Differential Privacycited by 0
- 2025TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Datacited by 0
- 2025Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models6 Jul 2025
- 2025TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Data22 Apr 2025
- 2025RewardDS: Privacy-Preserving Fine-Tuning for Large Language Models via Reward Driven Data Synthesis23 Feb 2025
- 2025Enhancing Privacy in the Early Detection of Sexual Predators Through Federated Learning and Differential Privacy21 Jan 2025
- 2025SafeSplit: A Novel Defense Against Client-Side Backdoor Attacks in Split Learning (Full Version)11 Jan 2025
- 2025Structure-Preference Enabled Graph Embedding Generation under Differential Privacy7 Jan 2025
- 2024Can large language models be privacy preserving and fair medical coders?7 Dec 2024
- 2024Upcycling Noise for Federated Unlearning7 Dec 2024
- 2024QuanCrypt-FL: Quantized Homomorphic Encryption with Pruning for Secure Federated Learning8 Nov 2024
- 2024Federated Learning under Periodic Client Participation and Heterogeneous Data: A New Communication-Efficient Algorithm and Analysis30 Oct 2024
- 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Models30 Jun 2024
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directions6 Jun 2024
20 more
- 2024Federated Learning for Blind Image Super-Resolution26 Apr 2024
- 2024Differentially Private Federated Learning: Servers Trustworthiness, Estimation, and Statistical Inference25 Apr 2024
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics10 Jan 2024
- 2023Privacy-preserving design of graph neural networks with applications to vertical federated learning31 Oct 2023
- 2023LatticeGen: A Cooperative Framework which Hides Generated Text in a Lattice for Privacy-Aware Generation on Cloud29 Sep 2023
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private training13 Jun 2023
- 2023Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations6 Jun 2023
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learning23 Jan 2023
- 2022CrowdGuard: Federated Backdoor Detection in Federated Learning14 Oct 2022
- 2022Hierarchical Federated Learning with Privacy10 Jun 2022
- 2022Protecting Data from all Parties: Combining FHE and DP in Federated Learning9 May 2022
- 2022What Does it Mean for a Language Model to Preserve Privacy?11 Feb 2022
- 2021Public Data-Assisted Mirror Descent for Private Model Training1 Dec 2021
- 2021Utility Fairness for the Differentially Private Federated Learning11 Sep 2021
- 2021Large-Scale Differentially Private BERT3 Aug 2021
- 2021Survey: Leakage and Privacy at Inference Time4 Jul 2021
- 2021Generative Adversarial Networks: A Survey Towards Private and Secure Applications7 Jun 2021
- 2021Towards Causal Federated Learning For Enhanced Robustness and Privacy14 Apr 2021
- 2021Private Cross-Silo Federated Learning for Extracting Vaccine Adverse Event Mentions12 Mar 2021
- 2021Applications of Federated Learning in Smart Cities: Recent Advances, Taxonomy, and Open Challenges2 Feb 2021
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2021Large-Scale Differentially Private BERTcited by 117
- 2021Public Data-Assisted Mirror Descent for Private Model Trainingcited by 49
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2022CrowdGuard: Federated Backdoor Detection in Federated Learningcited by 26
- 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Modelscited by 24
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learningcited by 23
- 2021Applications of Federated Learning in Smart Cities: Recent Advances, Taxonomy, and Open Challengescited by 17
- 2021Generative Adversarial Networks: A Survey Towards Private and Secure Applicationscited by 15
- 2021Towards Causal Federated Learning For Enhanced Robustness and Privacycited by 14
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directionscited by 10
12 most cited of 28 All 28 (JSON)
- 2025Model Inversion Attacks on Llama 3: Extracting PII from Large Language Models6 Jul 2025
- 2025TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Data22 Apr 2025
- 2025Enhancing Privacy in the Early Detection of Sexual Predators Through Federated Learning and Differential Privacy21 Jan 2025
- 2025SafeSplit: A Novel Defense Against Client-Side Backdoor Attacks in Split Learning (Full Version)11 Jan 2025
- 2025Structure-Preference Enabled Graph Embedding Generation under Differential Privacy7 Jan 2025
- 2024Can large language models be privacy preserving and fair medical coders?7 Dec 2024
- 2024QuanCrypt-FL: Quantized Homomorphic Encryption with Pruning for Secure Federated Learning8 Nov 2024
- 2024Federated Learning under Periodic Client Participation and Heterogeneous Data: A New Communication-Efficient Algorithm and Analysis30 Oct 2024
- 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Models30 Jun 2024
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directions6 Jun 2024
- 2024Federated Learning for Blind Image Super-Resolution26 Apr 2024
- 2024Differentially Private Federated Learning: Servers Trustworthiness, Estimation, and Statistical Inference25 Apr 2024
12 newest of 28 All 28 (JSON)