Privacy in Deep Learning: A Survey
Not on the map. Why?
Abstract (arXiv)
The ever-growing advances of deep learning in many areas including vision, recommendation systems, natural language processing, etc., have led to the adoption of Deep Neural Networks (DNNs) in production systems. The availability of large datasets and high computational power are the main contributors to these advances. The datasets are usually crowdsourced and may contain sensitive information. This poses serious privacy concerns as this data can be misused or leaked through various vulnerabilities. Even if the cloud provider and the communication link is trusted, there are still threats of inference attacks where an attacker could speculate properties of the data used for training, or find the underlying model architecture and parameters. In this survey, we review the privacy concerns brought by deep learning, and the mitigating techniques introduced to tackle these issues. We also show that there is a gap in the literature regarding test-time inference privacy, and propose possible future research directions.
Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). First posted on arXiv 25 Apr 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 19; 2022: 15; 2023: 12; 2024: 17; 2025: 5; 2026: 2.
70 papers.
Sort:
By area:
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2023Large Language Model Alignment: A Surveycited by 241
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2021Federated Learning for Open Bankingcited by 138
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2024Towards Modular LLMs by Building and Reusing a Library of LoRAscited by 72
- 2024Clio: Privacy-Preserving Insights into Real-World AI Usecited by 66
- 2021Socially Responsible AI Algorithms: Issues, Purposes, and Challengescited by 56
- 2023FedMultimodal: A Benchmark For Multimodal Federated Learningcited by 51
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Modelscited by 51
- 2022Memorization in NLP Fine-tuning Methodscited by 43
- 2021Membership Inference on Word Embedding and Beyondcited by 34
38 more
- 2021DP-SGD vs PATE: Which Has Less Disparate Impact on Model Accuracy?cited by 32
- 2022A Comprehensive Survey on Trustworthy Recommender Systemscited by 32
- 2021Privacy Regularization: Joint Privacy-Utility Optimization in Language Modelscited by 29
- 2021UserIdentifier: Implicit User Representations for Simple and Effective Personalized Sentiment Analysiscited by 28
- 2023A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applicationscited by 22
- 2021Collaborative Intelligence: Challenges and Opportunitiescited by 18
- 2021Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputscited by 18
- 2024Reasoning Capacity in Multi-Agent Systems: Limitations, Challenges and Human-Centered Solutionscited by 15
- 2022Differentially Private Model Compressioncited by 13
- 2022DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardwarecited by 13
- 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairnesscited by 13
- 2021Attribute Inference Attack of Speech Emotion Recognition in Federated Learning Settingscited by 12
- 2023Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Surveycited by 12
- 2022Binarizing Split Learning for Data Privacy Enhancement and Computation Reductioncited by 11
- 2023Unsupervised Deep Learning for IoT Time Seriescited by 11
- 2021Interference Suppression Using Deep Learning: Current Approaches and Open Challengescited by 10
- 2022Privacy Leakage in Text Classification: A Data Extraction Approachcited by 9
- 2021When Differential Privacy Meets Interpretability: A Case Studycited by 8
- 2024A General Framework for Learning from Weak Supervisioncited by 7
- 2022Federated Domain Adaptation for ASR with Full Self-Supervisioncited by 6
- 2023Hierarchical Training of Deep Neural Networks Using Early Exitingcited by 5
- 2024The Tug of War Within: Mitigating the Fairness-Privacy Conflicts in Large Language Modelscited by 5
- 2021Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspectivecited by 4
- 2023Quantifying Overfitting: Evaluating Neural Network Performance through Analysis of Null Spacecited by 4
- 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learningcited by 4
- 2021MPCLeague: Robust MPC Platform for Privacy-Preserving Machine Learningcited by 3
- 2023Data Encoding For Healthcare Data Democratisation and Information Leakage Preventioncited by 3
- 2024A Survey on Privacy Attacks Against Digital Twin Systems in AI-Roboticscited by 3
- 2024Sharper Bounds for Chebyshev Moment Matching, with Applicationscited by 3
- 2021Privacy-Preserving Image Acquisition Using Trainable Optical Kernelcited by 2
- 2022Securing the Classification of COVID-19 in Chest X-ray Images: A Privacy-Preserving Deep Learning Approachcited by 2
- 2022Privacy-Preserving Feature Coding for Machinescited by 2
- 2023A Comprehensive Study of Privacy Risks in Curriculum Learningcited by 2
- 2024EfficientMorph: Parameter-Efficient Transformer-Based Architecture for 3D Image Registrationcited by 2
- 2024Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognitioncited by 2
- 2021On the Privacy Risks of Deploying Recurrent Neural Networks in Machine Learning Modelscited by 1
- 2021Addressing Privacy Threats from Machine Learningcited by 1
- 2022Memorization of Named Entities in Fine-tuned BERT Modelscited by 1
50 most cited of 70 All 70 (JSON)
- 2026OptiPrime: Optimizing Private Inference through Protocol-Hardware Co-design15 Sep 2026
- 2026Accuracy is Not Enough: A Divergence-Based Approach to Evaluate Fidelity Loss in Quantized LLMs7 Sep 2026
- 2025Optimizer Dynamics at the Edge of Stability with Differential Privacy22 Dec 2025
- 2025FuSeFL: Fully Secure and Scalable Federated Learning18 Jul 2025
- 2025Steps Adaptive Decay DPSGD: Enhancing Performance on Imbalanced Datasets with Differential Privacy with HAM100009 Jul 2025
- 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learning25 May 2025
- 2025FedSAF: A Federated Learning Framework for Enhanced Gastric Cancer Detection and Privacy Preservation20 Mar 2025
- 2024Clio: Privacy-Preserving Insights into Real-World AI Use18 Dec 2024
- 2024Intermediate Outputs Are More Sensitive Than You Think1 Dec 2024
- 2024Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognition4 Nov 2024
- 2024The Tug of War Within: Mitigating the Fairness-Privacy Conflicts in Large Language Models22 Oct 2024
- 2024A Theoretical Survey on Foundation Models15 Oct 2024
38 more
- 2024Training with Differential Privacy: A Gradient-Preserving Noise Reduction Approach with Provable Security18 Sep 2024
- 2024Sharper Bounds for Chebyshev Moment Matching, with Applications22 Aug 2024
- 2024Security Concerns in Quantum Machine Learning as a Service18 Aug 2024
- 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imaging29 Jun 2024
- 2024A Survey on Privacy Attacks Against Digital Twin Systems in AI-Robotics27 Jun 2024
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models11 Jun 2024
- 2024Privacy Challenges in Meta-Learning: An Investigation on Model-Agnostic Meta-Learning1 Jun 2024
- 2024Towards Modular LLMs by Building and Reusing a Library of LoRAs18 May 2024
- 2024EfficientMorph: Parameter-Efficient Transformer-Based Architecture for 3D Image Registration16 Mar 2024
- 2024A General Framework for Learning from Weak Supervision2 Feb 2024
- 2024Reasoning Capacity in Multi-Agent Systems: Limitations, Challenges and Human-Centered Solutions2 Feb 2024
- 2024Mathematical Algorithm Design for Deep Learning under Societal and Judicial Constraints: The Algorithmic Transparency Requirement18 Jan 2024
- 2023A Comprehensive Study of Privacy Risks in Curriculum Learning16 Oct 2023
- 2023Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey28 Sep 2023
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2023A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications31 Aug 2023
- 2023FedMultimodal: A Benchmark For Multimodal Federated Learning15 Jun 2023
- 2023Quantifying Overfitting: Evaluating Neural Network Performance through Analysis of Null Space30 May 2023
- 2023Privacy Protectability: An Information-theoretical Approach25 May 2023
- 2023Deep Learning and Ethics24 May 2023
- 2023Data Encoding For Healthcare Data Democratisation and Information Leakage Prevention5 May 2023
- 2023Hierarchical Training of Deep Neural Networks Using Early Exiting4 Mar 2023
- 2023Unsupervised Deep Learning for IoT Time Series7 Feb 2023
- 2023Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy18 Jan 2023
- 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness18 Dec 2022
- 2022Memorization of Named Entities in Fine-tuned BERT Models7 Dec 2022
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Survey14 Oct 2022
- 2022Privacy-Preserving Feature Coding for Machines3 Oct 2022
- 2022A Comprehensive Survey on Trustworthy Recommender Systems21 Sep 2022
- 2022Selective manipulation of disentangled representations for privacy-aware facial image processing26 Aug 2022
- 2022DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardware30 Jun 2022
- 2022Binarizing Split Learning for Data Privacy Enhancement and Computation Reduction10 Jun 2022
- 2022Privacy Leakage in Text Classification: A Data Extraction Approach9 Jun 2022
- 2022Differentially Private Model Compression3 Jun 2022
- 2022Memorization in NLP Fine-tuning Methods25 May 2022
- 2022Federated Domain Adaptation for ASR with Full Self-Supervision30 Mar 2022
- 2022Securing the Classification of COVID-19 in Chest X-ray Images: A Privacy-Preserving Deep Learning Approach15 Mar 2022
- 2022Climate Change & Computer Audition: A Call to Action and Overview on Audio Intelligence to Help Save the Planet10 Mar 2022
50 newest of 70 All 70 (JSON)
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2021Membership Inference on Word Embedding and Beyondcited by 34
- 2025FuSeFL: Fully Secure and Scalable Federated Learningcited by 1
- 2025FuSeFL: Fully Secure and Scalable Federated Learning18 Jul 2025
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks8 Mar 2022
- 2021Membership Inference on Word Embedding and Beyond21 Jun 2021
- 2021Membership Inference Attacks on Machine Learning: A Survey14 Mar 2021
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2021Federated Learning for Open Bankingcited by 138
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2024Towards Modular LLMs by Building and Reusing a Library of LoRAscited by 72
- 2024Clio: Privacy-Preserving Insights into Real-World AI Usecited by 66
- 2021Socially Responsible AI Algorithms: Issues, Purposes, and Challengescited by 56
- 2023FedMultimodal: A Benchmark For Multimodal Federated Learningcited by 51
- 2022Memorization in NLP Fine-tuning Methodscited by 43
- 2021DP-SGD vs PATE: Which Has Less Disparate Impact on Model Accuracy?cited by 32
- 2022A Comprehensive Survey on Trustworthy Recommender Systemscited by 32
- 2021Privacy Regularization: Joint Privacy-Utility Optimization in Language Modelscited by 29
- 2021UserIdentifier: Implicit User Representations for Simple and Effective Personalized Sentiment Analysiscited by 28
- 2023A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applicationscited by 22
12 most cited of 63 All 63 (JSON)
- 2026OptiPrime: Optimizing Private Inference through Protocol-Hardware Co-design15 Sep 2026
- 2026Accuracy is Not Enough: A Divergence-Based Approach to Evaluate Fidelity Loss in Quantized LLMs7 Sep 2026
- 2025Optimizer Dynamics at the Edge of Stability with Differential Privacy22 Dec 2025
- 2025Steps Adaptive Decay DPSGD: Enhancing Performance on Imbalanced Datasets with Differential Privacy with HAM100009 Jul 2025
- 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learning25 May 2025
- 2025FedSAF: A Federated Learning Framework for Enhanced Gastric Cancer Detection and Privacy Preservation20 Mar 2025
- 2024Clio: Privacy-Preserving Insights into Real-World AI Use18 Dec 2024
- 2024Intermediate Outputs Are More Sensitive Than You Think1 Dec 2024
- 2024Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognition4 Nov 2024
- 2024The Tug of War Within: Mitigating the Fairness-Privacy Conflicts in Large Language Models22 Oct 2024
- 2024A Theoretical Survey on Foundation Models15 Oct 2024
- 2024Training with Differential Privacy: A Gradient-Preserving Noise Reduction Approach with Provable Security18 Sep 2024
12 newest of 63 All 63 (JSON)