Hypothesis Testing Interpretations and Renyi Differential Privacy
Not on the map. Why?
Abstract (arXiv)
Differential privacy is a de facto standard in data privacy, with applications in the public and private sectors. A way to explain differential privacy, which is particularly appealing to statistician and social scientists is by means of its statistical hypothesis testing interpretation. Informally, one cannot effectively test whether a specific individual has contributed her data by observing the output of a private mechanism---any test cannot have both high significance and high power. In this paper, we identify some conditions under which a privacy definition given in terms of a statistical divergence satisfies a similar interpretation. These conditions are useful to analyze the distinguishability power of divergences and we use them to study the hypothesis testing interpretation of some relaxations of differential privacy based on Renyi divergence. This analysis also results in an improved conversion rule between these definitions and differential privacy.
Key facts. Cited by 84 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 May 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 9; 2022: 14; 2023: 19; 2024: 17; 2025: 16; 2026: 9.
84 papers.
Sort:
By area:
- 2022Reconstructing Training Data with Informed Adversariescited by 143
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 83
- 2021Decentralized Federated Learning through Proxy Model Sharingcited by 56
- 2022TAN Without a Burn: Scaling Laws of DP-SGDcited by 51
- 2022Quantum Differential Privacy: An Information Theory Perspectivecited by 32
- 2022Defending against Reconstruction Attacks with R'enyi Differential Privacycited by 30
- 2021Federated f-Differential Privacycited by 29
- 2025Certified Unlearning for Neural Networkscited by 25
- 2022CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learningcited by 24
- 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learningcited by 23
- 2023Have it your way: Individualized Privacy Assignment for DP-SGDcited by 21
38 more
- 2024Differentially Private Next-Token Prediction of Large Language Modelscited by 21
- 2023Gaussian Membership Inference Privacycited by 20
- 2023Unleashing the Power of Randomization in Auditing Differentially Private MLcited by 19
- 2023ViP: A Differentially Private Foundation Model for Computer Visioncited by 17
- 2021On the Renyi Differential Privacy of the Shuffle Modelcited by 16
- 2023Bounding data reconstruction attacks with the hypothesis testing interpretation of differential privacycited by 14
- 2021Federated Deep Learning with Bayesian Privacycited by 13
- 2023Flow-based Distributionally Robust Optimizationcited by 13
- 2022Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attackscited by 12
- 2023Preserving Node-level Privacy in Graph Neural Networkscited by 11
- 2023Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learnerscited by 11
- 2022Improving Privacy-Preserving Vertical Federated Learning by Efficient Communication with ADMMcited by 10
- 2024Shifted Interpolation for Differential Privacycited by 10
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learningcited by 10
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacycited by 10
- 2023ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacycited by 9
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 9
- 2024DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptationcited by 9
- 2021Improving Differentially Private SGD via Randomly Sparsified Gradientscited by 8
- 2024Beyond the Calibration Point: Mechanism Comparison in Differential Privacycited by 8
- 2024Differentially Private Stochastic Gradient Descent with Fixed-Size Minibatches: Tighter RDP Guarantees with or without Replacementcited by 7
- 2021Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learningcited by 6
- 2022Privacy-Aware Compression for Federated Learning Through Numerical Mechanism Designcited by 6
- 2023Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attackscited by 6
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learningcited by 6
- 2025DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimationcited by 6
- 2022The Saddle-Point Accountant for Differential Privacycited by 5
- 2023Training Differentially Private Graph Neural Networks with Random Walk Samplingcited by 5
- 2023"Private Prediction Strikes Back!'' Private Kernelized Nearest Neighbors with Individual Renyi Filtercited by 5
- 2024Differentially Private Representation Learning via Image Captioningcited by 5
- 2024DP-2Stage: Adapting Language Models as Differentially Private Tabular Data Generatorscited by 5
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approachcited by 5
- 2022Shuffle Gaussian Mechanism for Differential Privacycited by 4
- 2022Renyi Differential Privacy of Propose-Test-Release and Applications to Private and Robust Machine Learningcited by 4
- 2023FedLAP-DP: Federated Learning by Sharing Differentially Private Loss Approximationscited by 4
- 2023A Unified View of Differentially Private Deep Generative Modelingcited by 4
- 2024DP-RDM: Adapting Diffusion Models to Private Domains Without Fine-Tuningcited by 4
- 2024Adaptively Private Next-Token Prediction of Large Language Modelscited by 4
50 most cited of 84 All 84 (JSON)
- 2026Differential Privacy of Gaussian Process Posterior Sampling16 Jun 2026
- 2026A nonparametric two-sample test using a parametric integral probability metric15 Jun 2026
- 2026When Do Fewer Coordinates Suffice in DP-SGD?3 Jun 2026
- 2026DP-LAC: Lightweight Adaptive Clipping for Differentially Private Federated Fine-tuning of Language Models11 May 2026
- 2026Differentially Private Clustered Federated Learning with Privacy-Preserving Initialization and Normality-Driven Aggregation22 Apr 2026
- 2026Bayesian Adversarial Privacy4 Mar 2026
- 2026Lap2: Revisiting Laplace DP-SGD for High Dimensions via Majorization Theory26 Feb 2026
- 2026Fairness risk and its privacy-enabled solution in AI-driven robotic applications13 Jan 2026
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning8 Jan 2026
- 2025Setting varepsilon is not the Issue in Differential Privacy9 Nov 2025
- 2025Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via f-Differential Privacy22 Oct 2025
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach15 Oct 2025
38 more
- 2025DP-Hype: Federated Differentially Private Hyperparameter Search6 Oct 2025
- 2025Differentially private federated learning for localized control of infectious disease dynamics17 Sep 2025
- 2025Public Data Assisted Differentially Private In-Context Learning13 Sep 2025
- 2025PLRV-O: Advancing Differentially Private Deep Learning via Privacy Loss Random Variable Optimization8 Sep 2025
- 2025SelectiveShield: Lightweight Hybrid Defense Against Gradient Leakage in Federated Learning6 Aug 2025
- 2025Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrix14 Jul 2025
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy30 Jun 2025
- 2025Differentially Private Relational Learning with Entity-level Privacy Guarantees10 Jun 2025
- 2025Certified Unlearning for Neural Networks8 Jun 2025
- 2025GCFL: A Gradient Correction-based Federated Learning Framework for Privacy-preserving CPSS4 Jun 2025
- 2025Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learning27 May 2025
- 2025DC-SGD: Differentially Private SGD with Dynamic Clipping through Gradient Norm Distribution Estimation29 Mar 2025
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning13 Mar 2025
- 2024DP-2Stage: Adapting Language Models as Differentially Private Tabular Data Generators3 Dec 2024
- 2024Preempting Text Sanitization Utility in Resource-Constrained Privacy-Preserving LLM Interactions18 Nov 2024
- 2024Laplace Transform Interpretation of Differential Privacy14 Nov 2024
- 2024NeurIPS 2023 Competition: Privacy Preserving Federated Learning Document VQA6 Nov 2024
- 2024Activity Recognition on Avatar-Anonymized Datasets with Masked Differential Privacy22 Oct 2024
- 2024DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning Based on Constant-Overhead Linear Secret Resharing21 Oct 2024
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning15 Oct 2024
- 2024Adaptively Private Next-Token Prediction of Large Language Models2 Oct 2024
- 2024Differentially Private Active Learning: Balancing Effective Data Selection and Privacy1 Oct 2024
- 2024Differentially Private Stochastic Gradient Descent with Fixed-Size Minibatches: Tighter RDP Guarantees with or without Replacement19 Aug 2024
- 2024Beyond the Calibration Point: Mechanism Comparison in Differential Privacy13 Jun 2024
- 2024DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptation10 May 2024
- 2024Differentially Private Next-Token Prediction of Large Language Models22 Mar 2024
- 2024DP-RDM: Adapting Diffusion Models to Private Domains Without Fine-Tuning21 Mar 2024
- 2024Differentially Private Representation Learning via Image Captioning4 Mar 2024
- 2024Shifted Interpolation for Differential Privacy1 Mar 2024
- 2024On the Privacy of Selection Mechanisms with Gaussian Noise9 Feb 2024
- 2023Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learners31 Dec 2023
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release23 Nov 2023
- 2023Preserving Node-level Privacy in Graph Neural Networks12 Nov 2023
- 2023DP-DCAN: Differentially Private Deep Contrastive Autoencoder Network for Single-cell Clustering6 Nov 2023
- 2023Flow-based Distributionally Robust Optimization30 Oct 2023
- 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learning10 Oct 2023
- 2023A Unified View of Differentially Private Deep Generative Modeling27 Sep 2023
- 2023S-BDT: Distributed Differentially Private Boosted Decision Trees21 Sep 2023
50 newest of 84 All 84 (JSON)
- 2025Certified Unlearning for Neural Networkscited by 25
- 2023Gaussian Membership Inference Privacycited by 20
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 9
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approachcited by 5
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearningcited by 0
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning8 Jan 2026
- 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach15 Oct 2025
- 2025Certified Unlearning for Neural Networks8 Jun 2025
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release23 Nov 2023
- 2023Gaussian Membership Inference Privacy12 Jun 2023
- 2022Reconstructing Training Data with Informed Adversariescited by 143
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 83
- 2021Decentralized Federated Learning through Proxy Model Sharingcited by 56
- 2022TAN Without a Burn: Scaling Laws of DP-SGDcited by 51
- 2022Quantum Differential Privacy: An Information Theory Perspectivecited by 32
- 2022Defending against Reconstruction Attacks with R'enyi Differential Privacycited by 30
- 2021Federated f-Differential Privacycited by 29
- 2022CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learningcited by 24
- 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learningcited by 23
- 2023Have it your way: Individualized Privacy Assignment for DP-SGDcited by 21
- 2024Differentially Private Next-Token Prediction of Large Language Modelscited by 21
12 most cited of 76 All 76 (JSON)
- 2026Differential Privacy of Gaussian Process Posterior Sampling16 Jun 2026
- 2026A nonparametric two-sample test using a parametric integral probability metric15 Jun 2026
- 2026When Do Fewer Coordinates Suffice in DP-SGD?3 Jun 2026
- 2026DP-LAC: Lightweight Adaptive Clipping for Differentially Private Federated Fine-tuning of Language Models11 May 2026
- 2026Differentially Private Clustered Federated Learning with Privacy-Preserving Initialization and Normality-Driven Aggregation22 Apr 2026
- 2026Bayesian Adversarial Privacy4 Mar 2026
- 2026Lap2: Revisiting Laplace DP-SGD for High Dimensions via Majorization Theory26 Feb 2026
- 2026Fairness risk and its privacy-enabled solution in AI-driven robotic applications13 Jan 2026
- 2025Setting varepsilon is not the Issue in Differential Privacy9 Nov 2025
- 2025Mitigating Privacy-Utility Trade-off in Decentralized Federated Learning via f-Differential Privacy22 Oct 2025
- 2025DP-Hype: Federated Differentially Private Hyperparameter Search6 Oct 2025
- 2025Differentially private federated learning for localized control of infectious disease dynamics17 Sep 2025
12 newest of 76 All 76 (JSON)