NeurIPS 2023 Competition: Privacy Preserving Federated Learning Document VQA
Not on the map. Why?
Abstract (arXiv)
The Privacy Preserving Federated Learning Document VQA (PFL-DocVQA) competition challenged the community to develop provably private and communication-efficient solutions in a federated setting for a real-life use case: invoice processing. The competition introduced a dataset of real invoice documents, along with associated questions and answers requiring information extraction and reasoning over the document images. Thereby, it brings together researchers and expertise from the document analysis, privacy, and federated learning communities. Participants fine-tuned a pre-trained, state-of-the-art Document Visual Question Answering model provided by the organizers for this new domain, mimicking a typical federated invoice processing setup. The base model is a multi-modal generative language model, and sensitive information could be exposed through either the visual or textual input modality. Participants proposed elegant solutions to reduce communication costs while maintaining a minimum utility threshold in track 1 and to protect all information from each document provider using differential privacy in track 2. The competition served as a new testbed for developing and testing private federated learning methods, simultaneously raising awareness about privacy within the document image analysis and recognition community. Ultimately, the competition analysis provides best practices and recommendations for successfully running privacy-focused federated learning challenges in the future.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 81 of its 104 references that are in the map. First posted on arXiv 6 Nov 2024.
Builds on
81 of 104 references.
References · 81
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2023GPT-4 Technical Reportcited by 18,396
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019Federated Learning: Challenges, Methods, and Future Directionscited by 1,538
- 2020DocVQA: A Dataset for VQA on Document Imagescited by 1,317
- 2014How transferable are features in deep neural networks?cited by 1,225
38 more
- 2019Deep Leakage from Gradientscited by 1,021
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 712
- 2017Renyi Differential Privacycited by 650
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 520
- 2020Flower: A Friendly Federated Learning Research Frameworkcited by 455
- 2021InfographicVQAcited by 437
- 2018Shampoo: Preconditioned Stochastic Tensor Optimizationcited by 426
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2020Label-Only Membership Inference Attackscited by 388
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
- 2020iDLG: Improved Deep Leakage from Gradientscited by 382
- 2023A Survey of Hallucination in Large Foundation Modelscited by 368
- 2022Pix2Struct: Screenshot Parsing as Pretraining for Visual Language Understandingcited by 366
- 2019Scene Text Visual Question Answeringcited by 331
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 224
- 2020Auditing Differentially Private Machine Learning: How Private is Private SGD?cited by 218
- 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 210
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 204
- 2021Federated Learning with Buffered Asynchronous Aggregationcited by 190
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
- 2020Membership Leakage in Label-Only Exposurescited by 168
- 2022DiT: Self-supervised Pre-training for Document Image Transformercited by 152
- 2021VisualMRC: Machine Reading Comprehension on Document Imagescited by 151
- 2021Federated Learning for Open Bankingcited by 141
- 2023Document Understanding Dataset and Evaluation (DUDE)cited by 135
- 2023Privacy Auditing with One (1) Training Runcited by 123
- 2022Hierarchical multimodal transformers for Multi-Page DocVQAcited by 105
- 2019DoubleSqueeze: Parallel Stochastic Gradient Descent with Double-Pass Error-Compensated Compressioncited by 99
- 2021Label Leakage and Protection in Two-party Split Learningcited by 90
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 88
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2019Hypothesis Testing Interpretations and Renyi Differential Privacycited by 85
- 2022Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakagecited by 72
- 2023DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Passcited by 67
- 2021LightSecAgg: a Lightweight and Versatile Design for Secure Aggregation in Federated Learningcited by 64
- 2023DocILE Benchmark for Document Information Localization and Extractioncited by 58
50 most cited of 81 All 81 (JSON)
Built on by
Citing papers per year: 2025: 2.
2 papers.