mlsanityData to 7 Oct 2026

Average-Case Averages: Private Algorithms for Smooth Sensitivity and Mean Estimation

arXiv 1906.02830 ↗First posted 6 Jun 2019math.ST cs.CR cs.DScited by 51

Not on the map. Why?

Abstract (arXiv)

The simplest and most widely applied method for guaranteeing differential privacy is to add instance-independent noise to a statistic of interest that is scaled to its global sensitivity. However, global sensitivity is a worst-case notion that is often too conservative for realized dataset instances. We provide methods for scaling noise in an instance-dependent way and demonstrate that they provide greater accuracy under average-case distributional assumptions. Specifically, we consider the basic problem of privately estimating the mean of a real distribution from i.i.d.~samples. The standard empirical mean estimator can have arbitrarily-high global sensitivity. We propose the trimmed mean estimator, which interpolates between the mean and the median, as a way of attaining much lower sensitivity on average while losing very little in terms of statistical accuracy. To privately estimate the trimmed mean, we revisit the smooth sensitivity framework of Nissim, Raskhodnikova, and Smith (STOC 2007), which provides a framework for using instance-dependent sensitivity. We propose three new additive noise distributions which provide concentrated differential privacy when scaled to smooth sensitivity. We provide theoretical and experimental evidence showing that our noise distributions compare favorably to others in the literature, in particular, when applied to the mean estimation problem.

Key facts. Cited by 51 papers in the map (data through 7 Oct 2026). First posted on arXiv 6 Jun 2019.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 16; 2022: 12; 2023: 7; 2024: 7; 2025: 6; 2026: 3.

51 papers.

Sort:

By area:

  1. 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
  2. 2022Measuring Forgetting of Memorized Training Examplescited by 118
  3. 2021Learning with User-Level Privacycited by 72
  4. 2021Differential privacy and robust statistics in high dimensionscited by 64
  5. 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
  6. 2022Robustness Implies Privacy in Statistical Estimationcited by 47
  7. 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
  8. 2021High Dimensional Differentially Private Stochastic Optimization with Heavy-tailed Datacited by 42
  9. 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
  10. 2021FriendlyCore: Practical Differentially Private Aggregationcited by 34
  11. 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
  12. 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
38 more
  1. 2023From Robustness to Privacy and Backcited by 27
  2. 2022DP-PCA: Statistically Optimal and Differentially Private PCAcited by 24
  3. 2021Differentially Private Quantilescited by 22
  4. 2021Gradient Leakage Attack Resilient Deep Learningcited by 17
  5. 2021Differentially-Private Clustering of Easy Instancescited by 17
  6. 2021Privately Learning Mixtures of Axis-Aligned Gaussianscited by 13
  7. 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimationcited by 12
  8. 2024A Huber Loss Minimization Approach to Mean Estimation under User-level Differential Privacycited by 11
  9. 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learningcited by 10
  10. 2022Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATEcited by 9
  11. 2022Differentially Private ℓ1-norm Linear Regression with Heavy-tailed Datacited by 8
  12. 2021Non-parametric Differentially Private Confidence Intervals for the Mediancited by 7
  13. 2021Generalization in the Face of Adaptivity: A Bayesian Perspectivecited by 7
  14. 2024Insufficient Statistics Perturbation: Stable Estimators for Private Least Squarescited by 7
  15. 2022On the Statistical Complexity of Estimation and Testing under Privacy Constraintscited by 6
  16. 2022Continual Mean Estimation Under User-Level Privacycited by 5
  17. 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributionscited by 5
  18. 2023Private Federated Learning with Autotuned Compressioncited by 5
  19. 2024Distribution Learnability and Robustnesscited by 4
  20. 2022Differentially Private Estimation via Statistical Depthcited by 3
  21. 2022Ensembling Neural Networks for Improved Prediction and Privacy in Early Diagnosis of Sepsiscited by 3
  22. 2023Subset-Based Instance Optimality in Private Estimationcited by 3
  23. 2024Not All Learnable Distribution Classes are Privately Learnablecited by 3
  24. 2024Learning with User-Level Local Differential Privacycited by 3
  25. 2025An Iterative Algorithm for Differentially Private k-PCA with Adaptive Noisecited by 3
  26. 2022Differentially private multivariate medianscited by 2
  27. 2021Smoothed Differential Privacycited by 1
  28. 2023The Relative Gaussian Mechanism and its Application to Private Gradient Descentcited by 1
  29. 2024Distribution-Aware Mean Estimation under User-level Local Differential Privacycited by 1
  30. 2025Improved subsample-and-aggregate via the private modified winsorized meancited by 1
  31. 2025Optimal Differentially Private Sampling of Unbounded Gaussianscited by 1
  32. 2025Differentially Private Sparse Linear Regression with Heavy-tailed Responsescited by 1
  33. 2022Efficient Private SCO for Heavy-Tailed Data via Averaged Clippingcited by 0
  34. 2023Instance-Specific Asymmetric Sensitivity in Differential Privacycited by 0
  35. 2025Differentially Private Selection using Smooth Sensitivitycited by 0
  36. 2025Differentially Private Nonparametric Confidence Intervals Under Minimal Distributional Assumptionscited by 0
  37. 2026Refined Differentially Private Linear Regression via Extension of a Free Lunch Resultcited by 0
  38. 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacycited by 0

50 most cited of 51 All 51 (JSON)