The Skellam Mechanism for Differentially Private Federated Learning
Not on the map. Why?
Abstract (arXiv)
We introduce the multi-dimensional Skellam mechanism, a discrete differential privacy mechanism based on the difference of two independent Poisson random variables. To quantify its privacy guarantees, we analyze the privacy loss distribution via a numerical evaluation and provide a sharp bound on the R'enyi divergence between two shifted Skellam distributions. While useful in both centralized and distributed privacy applications, we investigate how it can be applied in the context of federated learning with secure aggregation under communication constraints. Our theoretical findings and extensive experimental evaluations demonstrate that the Skellam mechanism provides the same privacy-accuracy trade-offs as the continuous Gaussian mechanism, even when the precision is low. More importantly, Skellam is closed under summation and sampling from it only requires sampling from a Poisson distribution -- an efficient routine that ships with all machine learning and data analysis software packages. These features, along with its discrete nature and competitive privacy-accuracy trade-offs, make it an attractive practical alternative to the newly introduced discrete Gaussian mechanism.
Key facts. Cited by 66 papers in the map (data through 7 Oct 2026). Builds on 28 of its 50 references that are in the map. First posted on arXiv 11 Oct 2021.
Builds on
28 of 50 references.
References · 28
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2020Adaptive Federated Optimizationcited by 1,036
- 2018LEAF: A Benchmark for Federated Settingscited by 780
- 2017Renyi Differential Privacycited by 643
- 2018Federated Learning for Mobile Keyboard Predictioncited by 565
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 320
- 2013The Composition Theorem for Differential Privacycited by 290
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 233
16 more
- 2019Differentially Private Learning with Adaptive Clippingcited by 218
- 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 216
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 169
- 2018cpSGD: Communication-efficient and differentially-private distributed SGDcited by 157
- 2016Concentrated Differential Privacycited by 139
- 2020The Discrete Gaussian for Differential Privacycited by 134
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2019Federated Learning for Emoji Prediction in a Mobile Keyboardcited by 115
- 2014Differentially Private Empirical Risk Minimization: Efficient Algorithms and Tight Error Boundscited by 104
- 2018A General Approach to Adding Differential Privacy to Iterative Training Procedurescited by 84
- 2020Federated Learning via Posterior Averaging: A New Perspective and Practical Algorithmscited by 78
- 2020Training Production Language Models without Memorizing User Datacited by 68
- 2020A Better Bound Gives a Hundred Rounds: Enhanced Privacy Guarantees via f-Divergencescited by 21
- 2018Locally Private Bayesian Inference for Count Modelscited by 9
- 2017Computational Differential Privacy from Lattice-based Cryptographycited by 6
Built on by
Citing papers per year: 2021: 4; 2022: 17; 2023: 15; 2024: 19; 2025: 6; 2026: 5.
66 papers.
Sort:
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 126
- 2021Eluding Secure Aggregation in Federated Learning via Model Inconsistencycited by 66
- 2023Federated Learning of Gboard Language Models with Differential Privacycited by 64
- 2023Recent Advances on Federated Learning: A Systematic Surveycited by 40
- 2022The Fundamental Price of Secure Aggregation in Differentially Private Federated Learningcited by 39
- 2022On Privacy and Personalization in Cross-Silo Federated Learningcited by 36
- 2022Sparse Random Networks for Communication-Efficient Federated Learningcited by 32
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimationcited by 22
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directionscited by 20
- 2023Practical Differentially Private and Byzantine-resilient Federated Learningcited by 18
38 more
- 2022Privacy-Aware Compression for Federated Data Analysiscited by 17
- 2023z-SignFedAvg: A Unified Stochastic Sign-based Compression for Federated Learningcited by 17
- 2024The Privacy Power of Correlated Noise in Decentralized Learningcited by 17
- 2023Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregationcited by 16
- 2023Randomized Quantization is All You Need for Differential Privacy in Federated Learningcited by 16
- 2024Federated Learning in Practice: Reflections and Projectionscited by 15
- 2022Distributed Differential Privacy in Multi-Armed Banditscited by 14
- 2023Is Aggregation the Only Choice? Federated Learning via Layer-wise Model Recombinationcited by 13
- 2021Towards Sparse Federated Analytics: Location Heatmaps under Distributed Differential Privacy with Secure Aggregationcited by 10
- 2022Federated Boosted Decision Trees with Differential Privacycited by 9
- 2023ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacycited by 9
- 2022Pisces: Efficient Federated Learning via Guided Asynchronous Trainingcited by 8
- 2022Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacycited by 7
- 2022Privacy-Aware Compression for Federated Learning Through Numerical Mechanism Designcited by 6
- 2023Balancing Privacy Protection and Interpretability in Federated Learningcited by 6
- 2022Federated Calibration and Evaluation of Binary Classifierscited by 5
- 2023Private Federated Learning with Autotuned Compressioncited by 5
- 2024Confidential Federated Computationscited by 4
- 2024Improved Communication-Privacy Trade-offs in L2 Mean Estimation under Streaming Differential Privacycited by 4
- 2024Correlated Privacy Mechanisms for Differentially Private Distributed Mean Estimationcited by 4
- 2022FedEntropy: Efficient Device Grouping for Federated Learning Using Maximum Entropy Judgmentcited by 3
- 2022Brownian Noise Reduction: Maximizing Privacy Subject to Accuracy Constraintscited by 3
- 2023Breaking the Communication-Privacy-Accuracy Tradeoff with f-Differential Privacycited by 3
- 2024Uncertainty-Based Extensible Codebook for Discrete Federated Learning in Heterogeneous Data Siloscited by 3
- 2024Efficient and Scalable Implementation of Differentially Private Deep Learning without Shortcutscited by 3
- 2024DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning Based on Constant-Overhead Linear Secret Resharingcited by 3
- 2022Differentially private partitioned variational inferencecited by 2
- 2024TernaryVote: Differentially Private, Communication Efficient, and Byzantine Resilient Distributed Optimization on Heterogeneous Datacited by 2
- 2024Privacy Amplification for the Gaussian Mechanism via Bounded Supportcited by 2
- 2024FedSheafHN: Personalized Federated Learning on Graph-structured Datacited by 2
- 2025Communication-Efficient and Privacy-Adaptable Mechanism for Federated Learningcited by 2
- 2023Cross-Silo Federated Learning Across Divergent Domains with Iterative Parameter Alignmentcited by 1
- 2024Decomposable Submodular Maximization in Federated Settingcited by 1
- 2024Privacy-Aware Randomized Quantization via Linear Programmingcited by 1
- 2024Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergencecited by 1
- 2024On Using Secure Aggregation in Differentially Private Federated Learning with Multiple Local Stepscited by 1
- 2025Personalized Subgraph Federated Learning with Sheaf Collaborationcited by 1
- 2026Communication-Efficient and Privacy-Adaptable Mechanism -- a Federated Learning Scheme with Convergence Analysiscited by 1
50 most cited of 66 All 66 (JSON)
- 2026Progressive-Resolution Secure Aggregation for Federated Learning30 Sep 2026
- 2026Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacy7 Jul 2026
- 2026Scalable and Private Federated Learning Using Distributed Differential Privacy and Secure Aggregation8 Apr 2026
- 2026Communication-Efficient and Privacy-Adaptable Mechanism -- a Federated Learning Scheme with Convergence Analysis15 Jan 2026
- 2026SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy14 Jan 2026
- 2025Infinitely divisible privacy and beyond I: resolution of the s2=2k conjecture30 Nov 2025
- 2025Federated Computation of ROC and PR Curves6 Oct 2025
- 2025Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing10 Sep 2025
- 2025Personalized Subgraph Federated Learning with Sheaf Collaboration19 Aug 2025
- 2025Dropout-Robust Mechanisms for Differentially Private and Fully Decentralized Mean Estimation4 Jun 2025
- 2025Communication-Efficient and Privacy-Adaptable Mechanism for Federated Learning21 Jan 2025
- 2024DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning Based on Constant-Overhead Linear Secret Resharing21 Oct 2024
38 more
- 2024Federated Learning in Practice: Reflections and Projections11 Oct 2024
- 2024Random Gradient Masking as a Defensive Measure to Deep Leakage in Federated Learning15 Aug 2024
- 2024On Using Secure Aggregation in Differentially Private Federated Learning with Multiple Local Steps27 Jul 2024
- 2024Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergence20 Jul 2024
- 2024Correlated Privacy Mechanisms for Differentially Private Distributed Mean Estimation3 Jul 2024
- 2024Efficient and Scalable Implementation of Differentially Private Deep Learning without Shortcuts25 Jun 2024
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs5 Jun 2024
- 2024Data Quality in Edge Machine Learning: A State-of-the-Art Survey1 Jun 2024
- 2024Privacy-Aware Randomized Quantization via Linear Programming1 Jun 2024
- 2024FedSheafHN: Personalized Federated Learning on Graph-structured Data25 May 2024
- 2024Differentially Private Federated Learning without Noise Addition: When is it Possible?6 May 2024
- 2024Improved Communication-Privacy Trade-offs in L2 Mean Estimation under Streaming Differential Privacy2 May 2024
- 2024The Privacy Power of Correlated Noise in Decentralized Learning2 May 2024
- 2024Confidential Federated Computations16 Apr 2024
- 2024Privacy Amplification for the Gaussian Mechanism via Bounded Support7 Mar 2024
- 2024Uncertainty-Based Extensible Codebook for Discrete Federated Learning in Heterogeneous Data Silos29 Feb 2024
- 2024TernaryVote: Differentially Private, Communication Efficient, and Byzantine Resilient Distributed Optimization on Heterogeneous Data16 Feb 2024
- 2024Decomposable Submodular Maximization in Federated Setting31 Jan 2024
- 2023Cross-Silo Federated Learning Across Divergent Domains with Iterative Parameter Alignment8 Nov 2023
- 2023ULDP-FL: Federated Learning with Across Silo User-Level Differential Privacy23 Aug 2023
- 2023Private Federated Learning with Autotuned Compression20 Jul 2023
- 2023Randomized Quantization is All You Need for Differential Privacy in Federated Learning20 Jun 2023
- 2023Federated Learning of Gboard Language Models with Differential Privacy29 May 2023
- 2023Is Aggregation the Only Choice? Federated Learning via Layer-wise Model Recombination18 May 2023
- 2023Practical Differentially Private and Byzantine-resilient Federated Learning15 Apr 2023
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimation4 Apr 2023
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy1 Mar 2023
- 2023Breaking the Communication-Privacy-Accuracy Tradeoff with f-Differential Privacy19 Feb 2023
- 2023Balancing Privacy Protection and Interpretability in Federated Learning16 Feb 2023
- 2023z-SignFedAvg: A Unified Stochastic Sign-based Compression for Federated Learning6 Feb 2023
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directions22 Jan 2023
- 2023Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation9 Jan 2023
- 2023Recent Advances on Federated Learning: A Systematic Survey3 Jan 2023
- 2022Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy8 Dec 2022
- 2022Privacy-Aware Compression for Federated Learning Through Numerical Mechanism Design8 Nov 2022
- 2022Federated Calibration and Evaluation of Binary Classifiers22 Oct 2022
- 2022Federated Boosted Decision Trees with Differential Privacy6 Oct 2022
- 2022Sparse Random Networks for Communication-Efficient Federated Learning30 Sep 2022
50 newest of 66 All 66 (JSON)
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 126
- 2021Eluding Secure Aggregation in Federated Learning via Model Inconsistencycited by 66
- 2023Federated Learning of Gboard Language Models with Differential Privacycited by 64
- 2023Recent Advances on Federated Learning: A Systematic Surveycited by 40
- 2022The Fundamental Price of Secure Aggregation in Differentially Private Federated Learningcited by 39
- 2022On Privacy and Personalization in Cross-Silo Federated Learningcited by 36
- 2022Sparse Random Networks for Communication-Efficient Federated Learningcited by 32
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimationcited by 22
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directionscited by 20
- 2023Practical Differentially Private and Byzantine-resilient Federated Learningcited by 18
12 most cited of 66 All 66 (JSON)
- 2026Progressive-Resolution Secure Aggregation for Federated Learning30 Sep 2026
- 2026Dithered Gaussian Mechanism for Randomness-Efficient Differential Privacy7 Jul 2026
- 2026Scalable and Private Federated Learning Using Distributed Differential Privacy and Secure Aggregation8 Apr 2026
- 2026Communication-Efficient and Privacy-Adaptable Mechanism -- a Federated Learning Scheme with Convergence Analysis15 Jan 2026
- 2026SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy14 Jan 2026
- 2025Infinitely divisible privacy and beyond I: resolution of the s2=2k conjecture30 Nov 2025
- 2025Federated Computation of ROC and PR Curves6 Oct 2025
- 2025Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing10 Sep 2025
- 2025Personalized Subgraph Federated Learning with Sheaf Collaboration19 Aug 2025
- 2025Dropout-Robust Mechanisms for Differentially Private and Fully Decentralized Mean Estimation4 Jun 2025
- 2025Communication-Efficient and Privacy-Adaptable Mechanism for Federated Learning21 Jan 2025
- 2024DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning Based on Constant-Overhead Linear Secret Resharing21 Oct 2024
12 newest of 66 All 66 (JSON)