From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum
Not on the map. Why?
Abstract (arXiv)
To improve the quality of Differentially private (DP) synthetic images, most studies have focused on improving the core optimization techniques (e.g., DP-SGD). Recently, we have witnessed a paradigm shift that takes these techniques off the shelf and studies how to use them together to achieve the best results. One notable work is DP-FETA, which proposes using `central images' for `warming up' the DP training and then using traditional DP-SGD. Inspired by DP-FETA, we are curious whether there are other such tools we can use together with DP-SGD. We first observe that using `central images' mainly works for datasets where there are many samples that look similar. To handle scenarios where images could vary significantly, we propose FETA-Pro, which introduces frequency features as `training shortcuts.' The complexity of frequency features lies between that of spatial features (captured by `central images') and full images, allowing for a finer-grained curriculum for DP training. To incorporate these two types of shortcuts together, one challenge is to handle the training discrepancy between spatial and frequency features. To address it, we leverage the pipeline generation property of generative models (instead of having one model trained with multiple features/objectives, we can have multiple models working on different features, then feed the generated results from one model into another) and use a more flexible design. Specifically, FETA-Pro introduces an auxiliary generator to produce images aligned with noisy frequency features. Then, another model is trained with these images, together with spatial features and DP-SGD. Evaluated across five sensitive image datasets, FETA-Pro shows an average of 25.7% higher fidelity and 4.1% greater utility than the best-performing baseline, under a privacy budget ε = 1.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 49 of its 75 references that are in the map. First posted on arXiv 10 Jan 2026.
Builds on
49 of 75 references.
References · 49
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2016Wide Residual Networkscited by 3,057
- 2016Improved Techniques for Training GANscited by 2,938
- 2016Deep Learning with Differential Privacycited by 2,682
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
37 more
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Improved Precision and Recall Metric for Assessing Generative Modelscited by 925
- 2017Renyi Differential Privacycited by 643
- 2019On Exact Computation with an Infinitely Wide Neural Netcited by 572
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2018Differentially Private Generative Adversarial Networkcited by 235
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2021Numerical Composition of Differential Privacycited by 174
- 2022Differentially Private Diffusion Modelscited by 118
- 2020GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generatorscited by 117
- 2023Diffusion Model is an Effective Planner and Data Synthesizer for Multi-Task Reinforcement Learningcited by 114
- 2023Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generationcited by 94
- 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 89
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2024Constrained Synthesis with Projected Diffusion Modelscited by 83
- 2020DP-MERF: Differentially Private Mean Embeddings with Random Features for Practical Privacy-Preserving Data Generationcited by 78
- 2023Differentially Private Synthetic Data via Foundation Model APIs 1: Imagescited by 63
- 2019G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminatorscited by 53
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2024Time Series Diffusion in the Frequency Domaincited by 35
- 2022Pre-trained Perceptual Features Improve Differentially Private Image Generationcited by 28
- 2023Feature Likelihood Divergence: Evaluating the Generalization of Generative Models Using Samplescited by 25
- 2021PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learningcited by 23
- 2020Why Spectral Normalization Stabilizes GANs: Analysis and Improvementscited by 21
- 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 18
- 2024Differentially Private Release of Israel's National Registry of Live Birthscited by 16
- 2024Unveiling Differences in Generative Models: A Scalable Differential Clustering Approachcited by 16
- 2025GaussMarker: Robust Dual-Domain Watermark for Diffusion Modelscited by 16
- 2023Differentially Private Neural Tangent Kernels for Privacy-Preserving Data Generationcited by 15
- 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Modelcited by 13
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 12
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
- 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediariescited by 8
- 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesiscited by 6
- 2025Can Synthetic Data be Fair and Private? A Comparative Study of Synthetic Data Generation and Fairness Algorithmscited by 4
Built on by
Not cited yet.