DP-NMT: Scalable Differentially-Private Machine Translation
Not on the map. Why?
Abstract (arXiv)
Neural machine translation (NMT) is a widely popular text generation task, yet there is a considerable research gap in the development of privacy-preserving NMT models, despite significant data privacy concerns for NMT systems. Differentially private stochastic gradient descent (DP-SGD) is a popular method for training machine learning models with concrete privacy guarantees; however, the implementation specifics of training a model with DP-SGD are not always clarified in existing models, with differing software libraries used and code bases not always being public, leading to reproducibility issues. To tackle this, we introduce DP-NMT, an open-source framework for carrying out research on privacy-preserving NMT with DP-SGD, bringing together numerous models, datasets, and evaluation metrics in one systematic software package. Our goal is to provide a platform for researchers to advance the development of privacy-preserving NMT systems, keeping the specific details of the DP-SGD algorithm transparent and intuitive to implement. We run a set of experiments on datasets from both general and privacy-related domains to demonstrate our framework in use. We make our framework publicly available and welcome feedback from the community.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 33 of its 60 references that are in the map. First posted on arXiv 24 Nov 2023.
Builds on
33 of 60 references.
References · 33
- 2017Attention Is All You Needcited by 59,932
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2020mT5: A massively multilingual pre-trained text-to-text transformercited by 1,813
- 2020Multilingual Denoising Pre-training for Neural Machine Translationcited by 1,028
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
21 more
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2018Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergencescited by 237
- 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 234
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 163
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2020Hiding Among the Clones: A Simple and Nearly Optimal Analysis of Privacy Amplification by Shufflingcited by 96
- 2019Membership Inference Attacks on Sequence-to-Sequence Models: Is My Data In Your Machine Translation System?cited by 68
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2021Selective Differential Privacy for Language Modelingcited by 61
- 2020Enabling Fast Differentially Private SGD via Just-in-Time Compilation and Vectorizationcited by 58
- 2014Differential Privacy: An Economic Method for Choosing Epsiloncited by 34
- 2021When differential privacy meets NLP: The devil is in the detailcited by 25
- 2021Privacy-Preserving Graph Convolutional Networks for Text Classificationcited by 19
- 2021Privacy enabled Financial Text Classification using Differential Privacy and Federated Learningcited by 18
- 2020Designing the Business Conversation Corpuscited by 14
- 2022Training Mixed-Domain Translation Models via Federated Learningcited by 12
- 2022The Impact of Differential Privacy on Group Disparity Mitigationcited by 11
- 2022How reparametrization trick broke differentially-private text representation learningcited by 10
- 2021Communication-Efficient Federated Learning for Neural Machine Translationcited by 5
- 2023To share or not to share: What risks would laypeople accept to give sensitive data to differentially-private NLP systems?cited by 3
Built on by
Citing papers per year: 2024: 3; 2025: 3; 2026: 1.
7 papers.
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2024Balls-and-Bins Sampling for DP-SGDcited by 13
- 2025Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewritingcited by 5
- 2024Granularity is crucial when applying differential privacy to text: An investigation for neural machine translationcited by 1
- 2025Data-Constrained Synthesis of Training Data for De-Identificationcited by 1
- 2025Investigating User Perspectives on Differentially Private Text Privatizationcited by 1
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatizationcited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2025Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewriting28 Mar 2025
- 2025Investigating User Perspectives on Differentially Private Text Privatization12 Mar 2025
- 2025Data-Constrained Synthesis of Training Data for De-Identification20 Feb 2025
- 2024Balls-and-Bins Sampling for DP-SGD21 Dec 2024
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsampling6 Nov 2024
- 2024Granularity is crucial when applying differential privacy to text: An investigation for neural machine translation26 Jul 2024