Differentially Private Generative Adversarial Network
Not on the map. Why?
Abstract (arXiv)
Generative Adversarial Network (GAN) and its variants have recently attracted intensive research interests due to their elegant theoretical foundation and excellent empirical performance as generative models. These tools provide a promising direction in the studies where data availability is limited. One common issue in GANs is that the density of the learned generative distribution could concentrate on the training data points, meaning that they can easily remember training samples due to the high model complexity of deep networks. This becomes a major concern when GANs are applied to private or sensitive data such as patient medical records, and the concentration of distribution may divulge critical patient information. To address this issue, in this paper we propose a differentially private GAN (DPGAN) model, in which we achieve differential privacy in GANs by adding carefully designed noise to gradients during the learning procedure. We provide rigorous proof for the privacy guarantee, as well as comprehensive empirical evidence to support our analysis, where we demonstrate that our method can generate high quality data points at a reasonable privacy level.
Key facts. Cited by 235 papers in the map (data through 7 Oct 2026). First posted on arXiv 19 Feb 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 34; 2022: 49; 2023: 57; 2024: 48; 2025: 30; 2026: 17.
235 papers.
Sort:
By area:
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2021How Faithful is your Synthetic Data? Sample-level Metrics for Evaluating and Auditing Generative Modelscited by 193
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2022Privacy for Free: How does Dataset Condensation Help Privacy?cited by 119
- 2022Differentially Private Diffusion Modelscited by 118
- 2023Machine Learning for Synthetic Data Generation: A Reviewcited by 118
- 2021DECAF: Generating Fair Synthetic Data Using Causally-Aware Generative Networkscited by 109
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2022Synthesizing Informative Training Samples with GANcited by 77
- 2022CTAB-GAN+: Enhancing Tabular Data Synthesiscited by 70
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
38 more
- 2022Synthetic Data -- what, why and how?cited by 66
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directionscited by 58
- 2021Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergencecited by 54
- 2024Towards Memorization-Free Diffusion Modelscited by 49
- 2021Robin Hood and Matthew Effects: Differential Privacy Has Disparate Impact on Synthetic Datacited by 48
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2022A Multifaceted Benchmarking of Synthetic Electronic Health Record Generation Modelscited by 43
- 2022Turning the Tables: Biased, Imbalanced, Dynamic Tabular Datasets for ML Evaluationcited by 39
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
- 2022Private Set Generation with Discriminative Informationcited by 34
- 2021ADePT: Auto-encoder based Differentially Private Text Transformationcited by 31
- 2021DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregationcited by 31
- 2024How Realistic Is Your Synthetic Data? Constraining Deep Generative Models for Tabular Datacited by 29
- 2022Pre-trained Perceptual Features Improve Differentially Private Image Generationcited by 28
- 2023DP-LDMs: Differentially Private Latent Diffusion Modelscited by 28
- 2021An Efficient DP-SGD Mechanism for Large Scale NLP Modelscited by 27
- 2025A Comprehensive Survey of Synthetic Tabular Data Generationcited by 27
- 2022Federated Learning with GAN-based Data Synthesis for Non-IID Clientscited by 25
- 2021PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learningcited by 23
- 2022Differentially Private SGDA for Minimax Problemscited by 23
- 2021FedDPGAN: Federated Differentially Private Generative Adversarial Networks Framework for the Detection of COVID-19 Pneumoniacited by 22
- 2022Bring Your Own Algorithm for Optimal Differentially Private Stochastic Minimax Optimizationcited by 22
- 2021Hermite Polynomial Features for Private Data Generationcited by 21
- 2023A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiencycited by 21
- 2023From Identifiable Causal Representations to Controllable Counterfactual Generation: A Survey on Causal Generative Modelingcited by 21
- 2021Generative adversarial networks in time series: A survey and taxonomycited by 20
- 2021DPNAS: Neural Architecture Search for Deep Learning with Differential Privacycited by 20
- 2021Differentially Private Sliced Wasserstein Distancecited by 19
- 2025The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaborationcited by 19
- 2023Generating Private Synthetic Data with Genetic Algorithmscited by 18
- 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 18
- 2023Private GANs, Revisitedcited by 17
- 2023TSGM: A Flexible Framework for Generative Modeling of Synthetic Time Seriescited by 16
- 2024Differentially Private Tabular Data Synthesis using Large Language Modelscited by 16
- 2021Generative Adversarial Networks: A Survey Towards Private and Secure Applicationscited by 15
50 most cited of 235 All 235 (JSON)
- 2026A Data-Interventional Framework for Auditing Privacy and Fairness in Generative Medical Imaging22 Sep 2026
- 2026A Differentially Private Federated Proximal Optimization Framework for Customer Churn Prediction in Heterogeneous Federated Telecom Networks11 Sep 2026
- 2026Differentially Private Paired Table-Image Multimodal Synthesis1 Sep 2026
- 2026Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework5 Aug 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026PATE-TabTransGAN: Differentially Private Synthetic Tabular Data Generation via Transformer-Based Student Discrimination26 May 2026
- 2026Class-Aware Adaptive Differential Privacy in Deep Learning for Sensor-Based Fall Detection3 May 2026
- 2026Knowledge-Guided Retrieval-Augmented Generation for Zero-Shot Psychiatric Data: Privacy Preserving Synthetic Data Generation26 Mar 2026
- 2026Quantifying Membership Disclosure Risk for Tabular Synthetic Data Using Kernel Density Estimators11 Mar 2026
- 2026Integrating Homomorphic Encryption and Synthetic Data in FL for Privacy and Learning Quality3 Mar 2026
- 2026Decomposing Private Image Generation via Coarse-to-Fine Wavelet Modeling26 Feb 2026
- 2026Can Generative Artificial Intelligence Survive Data Contamination? Theoretical Guarantees under Contaminated Recursive Training17 Feb 2026
38 more
- 2026Privacy Amplification Persists under Unlimited Synthetic Data Release3 Feb 2026
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective30 Jan 2026
- 2026Privacy-Preserving Model Transcription with Differentially Private Synthetic Distillation27 Jan 2026
- 2026Rethinking Benchmarks for Differentially Private Image Classification23 Jan 2026
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum10 Jan 2026
- 2025Differentially Private Synthetic Data Generation Using Context-Aware GANs9 Dec 2025
- 2025Beyond One-Size-Fits-All: Neural Networks for Differentially Private Tabular Data Synthesis17 Nov 2025
- 2025PrAda-GAN: A Private Adaptive Generative Adversarial Network with Bayes Network Structure11 Nov 2025
- 2025Privacy-Aware Time Series Synthesis via Public Knowledge Distillation1 Nov 2025
- 2025Differentially Private Linear Regression and Synthetic Data Generation with Statistical Guarantees19 Oct 2025
- 2025Locally Optimal Private Sampling: Beyond the Global Minimax10 Oct 2025
- 2025Differentially Private Wasserstein Barycenters3 Oct 2025
- 2025Controlled Generation for Private Synthetic Text30 Sep 2025
- 2025The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration16 Sep 2025
- 2025On the MIA Vulnerability Gap Between Private GANs and Diffusion Models3 Sep 2025
- 2025Privacy-Utility Trade-off in Data Publication: A Bilevel Optimization Framework with Curvature-Guided Perturbation2 Sep 2025
- 2025SoK: Data Minimization in Machine Learning14 Aug 2025
- 2025Privacy-Preserving Tabular Synthetic Data Generation Using TabularARGN8 Aug 2025
- 2025A Conditional GAN for Tabular Data Generation with Probabilistic Sampling of Latent Subspaces1 Aug 2025
- 2025Private Continuous-Time Synthetic Trajectory Generation via Mean-Field Langevin Dynamics13 Jun 2025
- 2025Private Evolution Converges10 Jun 2025
- 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediaries9 Jun 2025
- 2025Privacy Amplification Through Synthetic Data: Insights from Linear Regression5 Jun 2025
- 2025SFBD Flow: A Continuous-Optimization Framework for Training Diffusion Models with Noisy Samples3 Jun 2025
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generation31 May 2025
- 2025The DCR Delusion: Measuring the Privacy Risk of Synthetic Data2 May 2025
- 2025A False Sense of Privacy: Evaluating Textual Data Sanitization Beyond Surface-level Privacy Leakage28 Apr 2025
- 2025A Comprehensive Survey of Synthetic Tabular Data Generation23 Apr 2025
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data9 Apr 2025
- 2025Generating Synthetic Data with Formal Privacy Guarantees: State of the Art and the Road Ahead26 Mar 2025
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis18 Mar 2025
- 2025Privacy-Preserving Fair Synthetic Tabular Data4 Mar 2025
- 2025Private Text Generation by Seeding Large Language Model Prompts18 Feb 2025
- 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model8 Feb 2025
- 2025Stochastic Forward-Backward Deconvolution: Training Diffusion Models with Finite Noisy Datasets8 Feb 2025
- 2024GeFL: Model-Agnostic Federated Learning with Generative Models24 Dec 2024
- 2024A text-to-tabular approach to generate synthetic patient data using LLMs6 Dec 2024
- 2024DP-2Stage: Adapting Language Models as Differentially Private Tabular Data Generators3 Dec 2024
50 newest of 235 All 235 (JSON)
- 2022Differentially Private Diffusion Modelscited by 118
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2024Towards Memorization-Free Diffusion Modelscited by 49
- 2023DP-LDMs: Differentially Private Latent Diffusion Modelscited by 28
- 2025A Comprehensive Survey of Synthetic Tabular Data Generationcited by 27
- 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 18
- 2025Stochastic Forward-Backward Deconvolution: Training Diffusion Models with Finite Noisy Datasetscited by 11
- 2023Synthetic Health-related Longitudinal Data with Mixed-type Variables Generated using Diffusion Modelscited by 9
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Modelcited by 5
- 2023Quantifying Sample Anonymity in Score-Based Generative Models with Adversarial Fingerprintingcited by 4
- 2024CPSample: Classifier Protected Sampling for Guarding Training Data During Diffusioncited by 3
- 2023On the Inherent Privacy Properties of Discrete Denoising Diffusion Modelscited by 2
12 most cited of 17 All 17 (JSON)
- 2025On the MIA Vulnerability Gap Between Private GANs and Diffusion Models3 Sep 2025
- 2025SFBD Flow: A Continuous-Optimization Framework for Training Diffusion Models with Noisy Samples3 Jun 2025
- 2025A Comprehensive Survey of Synthetic Tabular Data Generation23 Apr 2025
- 2025Stochastic Forward-Backward Deconvolution: Training Diffusion Models with Finite Noisy Datasets8 Feb 2025
- 2024CPSample: Classifier Protected Sampling for Guarding Training Data During Diffusion11 Sep 2024
- 2024Learning Differentially Private Diffusion Models via Stochastic Adversarial Distillation27 Aug 2024
- 2024Efficient Differentially Private Fine-Tuning of Diffusion Models7 Jun 2024
- 2024Differentially Private Fine-Tuning of Diffusion Models3 Jun 2024
- 2024Towards Memorization-Free Diffusion Models1 Apr 2024
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model12 Mar 2024
- 2023PAC Privacy Preserving Diffusion Models2 Dec 2023
- 2023On the Inherent Privacy Properties of Discrete Denoising Diffusion Models24 Oct 2023
12 newest of 17 All 17 (JSON)
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2025The DCR Delusion: Measuring the Privacy Risk of Synthetic Datacited by 11
- 2021On Utility and Privacy in Synthetic Genomic Datacited by 8
- 2022An Empirical Study on the Membership Inference Attack against Tabular Data Synthesis Modelscited by 6
- 2022Privacy-preserving Generative Framework Against Membership Inference Attackscited by 3
- 2023Security and Privacy Issues of Federated Learningcited by 2
- 2023Preserving Privacy in GANs Against Membership Inference Attackcited by 2
- 2022Generative Models with Information-Theoretic Protection Against Membership Inference Attackscited by 1
- 2022LTU Attacker for Membership Inferencecited by 0
- 2024MGMD-GAN: Generalization Improvement of Generative Adversarial Networks with Multiple Generator Multiple Discriminator Framework Against Membership Inference Attackscited by 0
- 2025Privacy-Utility Trade-off in Data Publication: A Bilevel Optimization Framework with Curvature-Guided Perturbationcited by 0
- 2025Privacy-Utility Trade-off in Data Publication: A Bilevel Optimization Framework with Curvature-Guided Perturbation2 Sep 2025
- 2025The DCR Delusion: Measuring the Privacy Risk of Synthetic Data2 May 2025
- 2024MGMD-GAN: Generalization Improvement of Generative Adversarial Networks with Multiple Generator Multiple Discriminator Framework Against Membership Inference Attacks10 Oct 2024
- 2023Preserving Privacy in GANs Against Membership Inference Attack6 Nov 2023
- 2023Security and Privacy Issues of Federated Learning22 Jul 2023
- 2022An Empirical Study on the Membership Inference Attack against Tabular Data Synthesis Models17 Aug 2022
- 2022Generative Models with Information-Theoretic Protection Against Membership Inference Attacks31 May 2022
- 2022Privacy-preserving Generative Framework Against Membership Inference Attacks11 Feb 2022
- 2022LTU Attacker for Membership Inference4 Feb 2022
- 2021Membership Inference Attacks on Machine Learning: A Survey14 Mar 2021
- 2021On Utility and Privacy in Synthetic Genomic Data5 Feb 2021
- 2021How Faithful is your Synthetic Data? Sample-level Metrics for Evaluating and Auditing Generative Modelscited by 193
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2022Privacy for Free: How does Dataset Condensation Help Privacy?cited by 119
- 2023Machine Learning for Synthetic Data Generation: A Reviewcited by 118
- 2021DECAF: Generating Fair Synthetic Data Using Causally-Aware Generative Networkscited by 109
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2022Synthesizing Informative Training Samples with GANcited by 77
- 2022CTAB-GAN+: Enhancing Tabular Data Synthesiscited by 70
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2022Synthetic Data -- what, why and how?cited by 66
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
12 most cited of 201 All 201 (JSON)
- 2026A Data-Interventional Framework for Auditing Privacy and Fairness in Generative Medical Imaging22 Sep 2026
- 2026A Differentially Private Federated Proximal Optimization Framework for Customer Churn Prediction in Heterogeneous Federated Telecom Networks11 Sep 2026
- 2026Differentially Private Paired Table-Image Multimodal Synthesis1 Sep 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026PATE-TabTransGAN: Differentially Private Synthetic Tabular Data Generation via Transformer-Based Student Discrimination26 May 2026
- 2026Class-Aware Adaptive Differential Privacy in Deep Learning for Sensor-Based Fall Detection3 May 2026
- 2026Quantifying Membership Disclosure Risk for Tabular Synthetic Data Using Kernel Density Estimators11 Mar 2026
- 2026Integrating Homomorphic Encryption and Synthetic Data in FL for Privacy and Learning Quality3 Mar 2026
- 2026Decomposing Private Image Generation via Coarse-to-Fine Wavelet Modeling26 Feb 2026
- 2026Can Generative Artificial Intelligence Survive Data Contamination? Theoretical Guarantees under Contaminated Recursive Training17 Feb 2026
- 2026Privacy Amplification Persists under Unlimited Synthetic Data Release3 Feb 2026
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective30 Jan 2026
12 newest of 201 All 201 (JSON)