GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators
Not on the map. Why?
Abstract (arXiv)
The wide-spread availability of rich data has fueled the growth of machine learning applications in numerous domains. However, growth in domains with highly-sensitive data (e.g., medical) is largely hindered as the private nature of data prohibits it from being shared. To this end, we propose Gradient-sanitized Wasserstein Generative Adversarial Networks (GS-WGAN), which allows releasing a sanitized form of the sensitive data with rigorous privacy guarantees. In contrast to prior work, our approach is able to distort gradient information more precisely, and thereby enabling training deeper models which generate more informative samples. Moreover, our formulation naturally allows for training GANs in both centralized and federated (i.e., decentralized) data scenarios. Through extensive experiments, we find our approach consistently outperforms state-of-the-art approaches across multiple metrics (e.g., sample quality) and datasets.
Key facts. Cited by 117 papers in the map (data through 7 Oct 2026). First posted on arXiv 15 Jun 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 24; 2023: 31; 2024: 22; 2025: 19; 2026: 7.
117 papers.
Sort:
By area:
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2022Privacy for Free: How does Dataset Condensation Help Privacy?cited by 119
- 2022Differentially Private Diffusion Modelscited by 118
- 2023Machine Learning for Synthetic Data Generation: A Reviewcited by 118
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2022CTAB-GAN+: Enhancing Tabular Data Synthesiscited by 70
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2023Membership Inference Attacks against Synthetic Data through Overfitting Detectioncited by 66
- 2021Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergencecited by 54
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022Private Set Generation with Discriminative Informationcited by 34
- 2021DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregationcited by 31
38 more
- 2022Pre-trained Perceptual Features Improve Differentially Private Image Generationcited by 28
- 2023DP-LDMs: Differentially Private Latent Diffusion Modelscited by 28
- 2025A Comprehensive Survey of Synthetic Tabular Data Generationcited by 27
- 2021PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learningcited by 23
- 2024How Private are DP-SGD Implementations?cited by 22
- 2021Hermite Polynomial Features for Private Data Generationcited by 21
- 2022FedMed-GAN: Federated Domain Translation on Unsupervised Cross-Modality Brain Image Synthesiscited by 21
- 2023From Identifiable Causal Representations to Controllable Counterfactual Generation: A Survey on Causal Generative Modelingcited by 21
- 2021Perceptual Indistinguishability-Net (PI-Net): Facial Image Obfuscation with Manipulable Semanticscited by 20
- 2021Differentially Private Sliced Wasserstein Distancecited by 19
- 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 18
- 2023Private GANs, Revisitedcited by 17
- 2022On the Privacy Properties of GAN-generated Samplescited by 16
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2023Differentially Private Neural Tangent Kernels for Privacy-Preserving Data Generationcited by 15
- 2021Reducing bias and increasing utility by federated generative modeling of medical images using a centralized adversarycited by 14
- 2022DPD-fVAE: Synthetic Data Generation Using Federated Variational Autoencoders With Differentially-Private Decodercited by 14
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyondcited by 14
- 2022DP2-VAE: Differentially Private Pre-trained Variational Autoencoderscited by 13
- 2023DPMLBench: Holistic Evaluation of Differentially Private Machine Learningcited by 13
- 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Modelcited by 13
- 2023Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Surveycited by 12
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 12
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
- 2021PATE-AAE: Incorporating Adversarial Autoencoder into Private Aggregation of Teacher Ensembles for Spoken Command Classificationcited by 10
- 2022Noise-Aware Statistical Inference with Differentially Private Synthetic Datacited by 9
- 2023PPGenCDR: A Stable and Robust Framework for Privacy-Preserving Cross-Domain Recommendationcited by 9
- 2021On Utility and Privacy in Synthetic Genomic Datacited by 8
- 2022On the Utility Recovery Incapability of Neural Net-based Differential Private Tabular Training Data Synthesizer under Privacy Deregulationcited by 8
- 2021DTGAN: Differential Private Training for Tabular GANscited by 7
- 2022Differentially Private Generative Adversarial Networks with Model Inversioncited by 7
- 2023Deep Generative Models, Synthetic Tabular Data, and Differential Privacy: An Overview and Synthesiscited by 7
- 2023ODIM: Outlier Detection via Likelihood of Under-Fitted Generative Modelscited by 6
- 2023Federated Learning via Input-Output Collaborative Distillationcited by 6
- 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesiscited by 6
- 2021Federated CycleGAN for Privacy-Preserving Image-to-Image Translationcited by 5
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Modelcited by 5
- 2024State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Surveycited by 5
50 most cited of 117 All 117 (JSON)
- 2026Differentially Private Paired Table-Image Multimodal Synthesis1 Sep 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026Decomposing Private Image Generation via Coarse-to-Fine Wavelet Modeling26 Feb 2026
- 2026Privacy-Preserving Model Transcription with Differentially Private Synthetic Distillation27 Jan 2026
- 2026Differential Privacy Image Generation with Reconstruction Loss and Noise Injection Using an Error Feedback SGD21 Jan 2026
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD15 Jan 2026
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum10 Jan 2026
- 2025ALIGN-FL: Architecture-independent Learning through Invariant Generative component sharing in Federated Learning15 Dec 2025
- 2025Beyond One-Size-Fits-All: Neural Networks for Differentially Private Tabular Data Synthesis17 Nov 2025
- 2025PrAda-GAN: A Private Adaptive Generative Adversarial Network with Bayes Network Structure11 Nov 2025
- 2025Controlled Generation for Private Synthetic Text30 Sep 2025
- 2025On the MIA Vulnerability Gap Between Private GANs and Diffusion Models3 Sep 2025
38 more
- 2025Privacy-Utility Trade-off in Data Publication: A Bilevel Optimization Framework with Curvature-Guided Perturbation2 Sep 2025
- 2025DP-DocLDM: Differentially Private Document Image Generation using Latent Diffusion Models6 Aug 2025
- 2025A Conditional GAN for Tabular Data Generation with Probabilistic Sampling of Latent Subspaces1 Aug 2025
- 2025SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation24 Jun 2025
- 2025Beyond Anonymization: Object Scrubbing for Privacy-Preserving 2D and 3D Vision Tasks23 Apr 2025
- 2025A Comprehensive Survey of Synthetic Tabular Data Generation23 Apr 2025
- 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis2 Apr 2025
- 2025Personalized Federated Training of Diffusion Models with Privacy Guarantees1 Apr 2025
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis18 Mar 2025
- 2025Understanding Flatness in Generative Models: Its Role and Benefits14 Mar 2025
- 2025PRISM: Privacy-Preserving Improved Stochastic Masking for Federated Generative Models11 Mar 2025
- 2025Private Text Generation by Seeding Large Language Model Prompts18 Feb 2025
- 2025RAPID: Retrieval Augmented Training of Differentially Private Diffusion Models18 Feb 2025
- 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model8 Feb 2025
- 2024Federated Diffusion Modeling with Differential Privacy for Tabular Data Synthesis20 Dec 2024
- 2024DP-CDA: An Algorithm for Enhanced Privacy Preservation in Dataset Synthesis Through Randomized Mixing25 Nov 2024
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsampling6 Nov 2024
- 2024Privacy without Noisy Gradients: Slicing Mechanism for Generative Model Training25 Oct 2024
- 2024PFGuard: A Generative Framework with Privacy and Fairness Safeguards3 Oct 2024
- 2024Privacy-Preserving Student Learning with Differentially Private Data-Free Distillation19 Sep 2024
- 2024VFLGAN-TS: Vertical Federated Learning-based Generative Adversarial Networks for Publication of Vertically Partitioned Time-Series Data5 Sep 2024
- 2024Learning Privacy-Preserving Student Networks via Discriminative-Generative Distillation4 Sep 2024
- 2024Learning Differentially Private Diffusion Models via Stochastic Adversarial Distillation27 Aug 2024
- 2024A Comprehensive Sustainable Framework for Machine Learning and Artificial Intelligence17 Jul 2024
- 2024AspirinSum: an Aspect-based utility-preserved de-identification Summarization framework20 Jun 2024
- 2024Efficient Differentially Private Fine-Tuning of Diffusion Models7 Jun 2024
- 2024Differentially Private Fine-Tuning of Diffusion Models3 Jun 2024
- 2024Inference With Combining Rules From Multiple Differentially Private Synthetic Datasets8 May 2024
- 2024PATE-TripleGAN: Privacy-Preserving Image Synthesis with Gaussian Differential Privacy19 Apr 2024
- 2024VFLGAN: Vertical Federated Learning-based Generative Adversarial Network for Vertically Partitioned Data Publication15 Apr 2024
- 2024Privacy Re-identification Attacks on Tabular GANs31 Mar 2024
- 2024How Private are DP-SGD Implementations?26 Mar 2024
- 2024Does Differentially Private Synthetic Data Lead to Synthetic Discoveries?20 Mar 2024
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model12 Mar 2024
- 2024State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey25 Feb 2024
- 2024A Bias-Variance Decomposition for Ensembles over Multiple Synthetic Datasets6 Feb 2024
- 2023Federated Learning via Input-Output Collaborative Distillation22 Dec 2023
- 2023A self-attention-based differentially private tabular GAN with high data utility20 Dec 2023
50 newest of 117 All 117 (JSON)
- 2022Differentially Private Diffusion Modelscited by 118
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2023DP-LDMs: Differentially Private Latent Diffusion Modelscited by 28
- 2025A Comprehensive Survey of Synthetic Tabular Data Generationcited by 27
- 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 18
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 12
- 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesiscited by 6
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Modelcited by 5
- 2025Understanding Flatness in Generative Models: Its Role and Benefitscited by 3
- 2024Learning Differentially Private Diffusion Models via Stochastic Adversarial Distillationcited by 2
- 2024Federated Diffusion Modeling with Differential Privacy for Tabular Data Synthesiscited by 2
- 2024Efficient Differentially Private Fine-Tuning of Diffusion Modelscited by 1
12 most cited of 16 All 16 (JSON)
- 2025On the MIA Vulnerability Gap Between Private GANs and Diffusion Models3 Sep 2025
- 2025DP-DocLDM: Differentially Private Document Image Generation using Latent Diffusion Models6 Aug 2025
- 2025A Comprehensive Survey of Synthetic Tabular Data Generation23 Apr 2025
- 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis2 Apr 2025
- 2025Personalized Federated Training of Diffusion Models with Privacy Guarantees1 Apr 2025
- 2025Understanding Flatness in Generative Models: Its Role and Benefits14 Mar 2025
- 2024Federated Diffusion Modeling with Differential Privacy for Tabular Data Synthesis20 Dec 2024
- 2024Learning Differentially Private Diffusion Models via Stochastic Adversarial Distillation27 Aug 2024
- 2024Efficient Differentially Private Fine-Tuning of Diffusion Models7 Jun 2024
- 2024Differentially Private Fine-Tuning of Diffusion Models3 Jun 2024
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model12 Mar 2024
- 2023PAC Privacy Preserving Diffusion Models2 Dec 2023
12 newest of 16 All 16 (JSON)
- 2023Membership Inference Attacks against Synthetic Data through Overfitting Detectioncited by 66
- 2022On the Privacy Properties of GAN-generated Samplescited by 16
- 2021On Utility and Privacy in Synthetic Genomic Datacited by 8
- 2022Privacy-preserving Generative Framework Against Membership Inference Attackscited by 3
- 2022Generative Models with Information-Theoretic Protection Against Membership Inference Attackscited by 1
- 2025Privacy-Utility Trade-off in Data Publication: A Bilevel Optimization Framework with Curvature-Guided Perturbationcited by 0
- 2025Privacy-Utility Trade-off in Data Publication: A Bilevel Optimization Framework with Curvature-Guided Perturbation2 Sep 2025
- 2023Membership Inference Attacks against Synthetic Data through Overfitting Detection24 Feb 2023
- 2022On the Privacy Properties of GAN-generated Samples3 Jun 2022
- 2022Generative Models with Information-Theoretic Protection Against Membership Inference Attacks31 May 2022
- 2022Privacy-preserving Generative Framework Against Membership Inference Attacks11 Feb 2022
- 2021On Utility and Privacy in Synthetic Genomic Data5 Feb 2021
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2022Privacy for Free: How does Dataset Condensation Help Privacy?cited by 119
- 2023Machine Learning for Synthetic Data Generation: A Reviewcited by 118
- 2022CTAB-GAN+: Enhancing Tabular Data Synthesiscited by 70
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2021Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergencecited by 54
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022Private Set Generation with Discriminative Informationcited by 34
- 2021DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregationcited by 31
- 2022Pre-trained Perceptual Features Improve Differentially Private Image Generationcited by 28
- 2021PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learningcited by 23
- 2024How Private are DP-SGD Implementations?cited by 22
12 most cited of 93 All 93 (JSON)
- 2026Differentially Private Paired Table-Image Multimodal Synthesis1 Sep 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026Decomposing Private Image Generation via Coarse-to-Fine Wavelet Modeling26 Feb 2026
- 2026Privacy-Preserving Model Transcription with Differentially Private Synthetic Distillation27 Jan 2026
- 2026Differential Privacy Image Generation with Reconstruction Loss and Noise Injection Using an Error Feedback SGD21 Jan 2026
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD15 Jan 2026
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum10 Jan 2026
- 2025ALIGN-FL: Architecture-independent Learning through Invariant Generative component sharing in Federated Learning15 Dec 2025
- 2025Beyond One-Size-Fits-All: Neural Networks for Differentially Private Tabular Data Synthesis17 Nov 2025
- 2025PrAda-GAN: A Private Adaptive Generative Adversarial Network with Bayes Network Structure11 Nov 2025
- 2025Controlled Generation for Private Synthetic Text30 Sep 2025
- 2025A Conditional GAN for Tabular Data Generation with Probabilistic Sampling of Latent Subspaces1 Aug 2025
12 newest of 93 All 93 (JSON)