Average-Case Averages: Private Algorithms for Smooth Sensitivity and Mean Estimation
Not on the map. Why?
Abstract (arXiv)
The simplest and most widely applied method for guaranteeing differential privacy is to add instance-independent noise to a statistic of interest that is scaled to its global sensitivity. However, global sensitivity is a worst-case notion that is often too conservative for realized dataset instances. We provide methods for scaling noise in an instance-dependent way and demonstrate that they provide greater accuracy under average-case distributional assumptions. Specifically, we consider the basic problem of privately estimating the mean of a real distribution from i.i.d.~samples. The standard empirical mean estimator can have arbitrarily-high global sensitivity. We propose the trimmed mean estimator, which interpolates between the mean and the median, as a way of attaining much lower sensitivity on average while losing very little in terms of statistical accuracy. To privately estimate the trimmed mean, we revisit the smooth sensitivity framework of Nissim, Raskhodnikova, and Smith (STOC 2007), which provides a framework for using instance-dependent sensitivity. We propose three new additive noise distributions which provide concentrated differential privacy when scaled to smooth sensitivity. We provide theoretical and experimental evidence showing that our noise distributions compare favorably to others in the literature, in particular, when applied to the mean estimation problem.
Key facts. Cited by 51 papers in the map (data through 7 Oct 2026). First posted on arXiv 6 Jun 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 12; 2023: 7; 2024: 7; 2025: 6; 2026: 3.
51 papers.
Sort:
By area:
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2021Learning with User-Level Privacycited by 72
- 2021Differential privacy and robust statistics in high dimensionscited by 64
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2022Robustness Implies Privacy in Statistical Estimationcited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2021High Dimensional Differentially Private Stochastic Optimization with Heavy-tailed Datacited by 42
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2021FriendlyCore: Practical Differentially Private Aggregationcited by 34
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
38 more
- 2023From Robustness to Privacy and Backcited by 27
- 2022DP-PCA: Statistically Optimal and Differentially Private PCAcited by 24
- 2021Differentially Private Quantilescited by 22
- 2021Gradient Leakage Attack Resilient Deep Learningcited by 17
- 2021Differentially-Private Clustering of Easy Instancescited by 17
- 2021Privately Learning Mixtures of Axis-Aligned Gaussianscited by 13
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimationcited by 12
- 2024A Huber Loss Minimization Approach to Mean Estimation under User-level Differential Privacycited by 11
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learningcited by 10
- 2022Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATEcited by 9
- 2022Differentially Private ℓ1-norm Linear Regression with Heavy-tailed Datacited by 8
- 2021Non-parametric Differentially Private Confidence Intervals for the Mediancited by 7
- 2021Generalization in the Face of Adaptivity: A Bayesian Perspectivecited by 7
- 2024Insufficient Statistics Perturbation: Stable Estimators for Private Least Squarescited by 7
- 2022On the Statistical Complexity of Estimation and Testing under Privacy Constraintscited by 6
- 2022Continual Mean Estimation Under User-Level Privacycited by 5
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributionscited by 5
- 2023Private Federated Learning with Autotuned Compressioncited by 5
- 2024Distribution Learnability and Robustnesscited by 4
- 2022Differentially Private Estimation via Statistical Depthcited by 3
- 2022Ensembling Neural Networks for Improved Prediction and Privacy in Early Diagnosis of Sepsiscited by 3
- 2023Subset-Based Instance Optimality in Private Estimationcited by 3
- 2024Not All Learnable Distribution Classes are Privately Learnablecited by 3
- 2024Learning with User-Level Local Differential Privacycited by 3
- 2025An Iterative Algorithm for Differentially Private k-PCA with Adaptive Noisecited by 3
- 2022Differentially private multivariate medianscited by 2
- 2021Smoothed Differential Privacycited by 1
- 2023The Relative Gaussian Mechanism and its Application to Private Gradient Descentcited by 1
- 2024Distribution-Aware Mean Estimation under User-level Local Differential Privacycited by 1
- 2025Improved subsample-and-aggregate via the private modified winsorized meancited by 1
- 2025Optimal Differentially Private Sampling of Unbounded Gaussianscited by 1
- 2025Differentially Private Sparse Linear Regression with Heavy-tailed Responsescited by 1
- 2022Efficient Private SCO for Heavy-Tailed Data via Averaged Clippingcited by 0
- 2023Instance-Specific Asymmetric Sensitivity in Differential Privacycited by 0
- 2025Differentially Private Selection using Smooth Sensitivitycited by 0
- 2025Differentially Private Nonparametric Confidence Intervals Under Minimal Distributional Assumptionscited by 0
- 2026Refined Differentially Private Linear Regression via Extension of a Free Lunch Resultcited by 0
- 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacycited by 0
50 most cited of 51 All 51 (JSON)
- 2026Limits of Personalizing Differential Privacy Budgets13 May 2026
- 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacy17 Apr 2026
- 2026Refined Differentially Private Linear Regression via Extension of a Free Lunch Result11 Apr 2026
- 2025Differentially Private Nonparametric Confidence Intervals Under Minimal Distributional Assumptions3 Nov 2025
- 2025An Iterative Algorithm for Differentially Private k-PCA with Adaptive Noise14 Aug 2025
- 2025Differentially Private Sparse Linear Regression with Heavy-tailed Responses7 Jun 2025
- 2025Differentially Private Selection using Smooth Sensitivity10 Apr 2025
- 2025Optimal Differentially Private Sampling of Unbounded Gaussians3 Mar 2025
- 2025Improved subsample-and-aggregate via the private modified winsorized mean23 Jan 2025
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning15 Oct 2024
- 2024Distribution-Aware Mean Estimation under User-level Local Differential Privacy12 Oct 2024
- 2024Distribution Learnability and Robustness25 Jun 2024
38 more
- 2024Learning with User-Level Local Differential Privacy27 May 2024
- 2024A Huber Loss Minimization Approach to Mean Estimation under User-level Differential Privacy22 May 2024
- 2024Insufficient Statistics Perturbation: Stable Estimators for Private Least Squares23 Apr 2024
- 2024Not All Learnable Distribution Classes are Privately Learnable1 Feb 2024
- 2023Instance-Specific Asymmetric Sensitivity in Differential Privacy2 Nov 2023
- 2023The Relative Gaussian Mechanism and its Application to Private Gradient Descent29 Aug 2023
- 2023Private Federated Learning with Autotuned Compression20 Jul 2023
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributions13 Apr 2023
- 2023Subset-Based Instance Optimality in Private Estimation1 Mar 2023
- 2023From Robustness to Privacy and Back3 Feb 2023
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimation30 Jan 2023
- 2022Continual Mean Estimation Under User-Level Privacy20 Dec 2022
- 2022Robustness Implies Privacy in Statistical Estimation9 Dec 2022
- 2022Differentially private multivariate medians12 Oct 2022
- 2022On the Statistical Complexity of Estimation and Testing under Privacy Constraints5 Oct 2022
- 2022Ensembling Neural Networks for Improved Prediction and Privacy in Early Diagnosis of Sepsis1 Sep 2022
- 2022Differentially Private Estimation via Statistical Depth26 Jul 2022
- 2022Measuring Forgetting of Memorized Training Examples30 Jun 2022
- 2022Efficient Private SCO for Heavy-Tailed Data via Averaged Clipping27 Jun 2022
- 2022DP-PCA: Statistically Optimal and Differentially Private PCA27 May 2022
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemma17 May 2022
- 2022Adaptive Private-K-Selection with Adaptive K and Application to Multi-label PATE30 Mar 2022
- 2022Differentially Private ℓ1-norm Linear Regression with Heavy-tailed Data10 Jan 2022
- 2021Differentially-Private Clustering of Easy Instances29 Dec 2021
- 2021Gradient Leakage Attack Resilient Deep Learning25 Dec 2021
- 2021Private Robust Estimation by Stabilizing Convex Relaxations7 Dec 2021
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanism25 Nov 2021
- 2021Differential privacy and robust statistics in high dimensions12 Nov 2021
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussians8 Nov 2021
- 2021FriendlyCore: Practical Differentially Private Aggregation19 Oct 2021
- 2021High Dimensional Differentially Private Stochastic Optimization with Heavy-tailed Data23 Jul 2021
- 2021Smoothed Differential Privacy4 Jul 2021
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimation24 Jun 2021
- 2021Generalization in the Face of Adaptivity: A Bayesian Perspective20 Jun 2021
- 2021Non-parametric Differentially Private Confidence Intervals for the Median18 Jun 2021
- 2021Privately Learning Mixtures of Axis-Aligned Gaussians3 Jun 2021
- 2021Learning with User-Level Privacy23 Feb 2021
- 2021Differentially Private Quantiles16 Feb 2021
50 newest of 51 All 51 (JSON)
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2021Learning with User-Level Privacycited by 72
- 2021Differential privacy and robust statistics in high dimensionscited by 64
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2022Robustness Implies Privacy in Statistical Estimationcited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2021High Dimensional Differentially Private Stochastic Optimization with Heavy-tailed Datacited by 42
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
- 2021FriendlyCore: Practical Differentially Private Aggregationcited by 34
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
12 most cited of 50 All 50 (JSON)
- 2026Limits of Personalizing Differential Privacy Budgets13 May 2026
- 2026Refined Differentially Private Linear Regression via Extension of a Free Lunch Result11 Apr 2026
- 2025Differentially Private Nonparametric Confidence Intervals Under Minimal Distributional Assumptions3 Nov 2025
- 2025An Iterative Algorithm for Differentially Private k-PCA with Adaptive Noise14 Aug 2025
- 2025Differentially Private Sparse Linear Regression with Heavy-tailed Responses7 Jun 2025
- 2025Differentially Private Selection using Smooth Sensitivity10 Apr 2025
- 2025Optimal Differentially Private Sampling of Unbounded Gaussians3 Mar 2025
- 2025Improved subsample-and-aggregate via the private modified winsorized mean23 Jan 2025
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning15 Oct 2024
- 2024Distribution-Aware Mean Estimation under User-level Local Differential Privacy12 Oct 2024
- 2024Distribution Learnability and Robustness25 Jun 2024
- 2024Learning with User-Level Local Differential Privacy27 May 2024
12 newest of 50 All 50 (JSON)