mlsanityData to 7 Oct 2026

From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum

arXiv 2601.06368 ↗First posted 10 Jan 2026cs.CR cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

To improve the quality of Differentially private (DP) synthetic images, most studies have focused on improving the core optimization techniques (e.g., DP-SGD). Recently, we have witnessed a paradigm shift that takes these techniques off the shelf and studies how to use them together to achieve the best results. One notable work is DP-FETA, which proposes using `central images' for `warming up' the DP training and then using traditional DP-SGD. Inspired by DP-FETA, we are curious whether there are other such tools we can use together with DP-SGD. We first observe that using `central images' mainly works for datasets where there are many samples that look similar. To handle scenarios where images could vary significantly, we propose FETA-Pro, which introduces frequency features as `training shortcuts.' The complexity of frequency features lies between that of spatial features (captured by `central images') and full images, allowing for a finer-grained curriculum for DP training. To incorporate these two types of shortcuts together, one challenge is to handle the training discrepancy between spatial and frequency features. To address it, we leverage the pipeline generation property of generative models (instead of having one model trained with multiple features/objectives, we can have multiple models working on different features, then feed the generated results from one model into another) and use a more flexible design. Specifically, FETA-Pro introduces an auxiliary generator to produce images aligned with noisy frequency features. Then, another model is trained with these images, together with spatial features and DP-SGD. Evaluated across five sensitive image datasets, FETA-Pro shows an average of 25.7% higher fidelity and 4.1% greater utility than the best-performing baseline, under a privacy budget ε = 1.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 49 of its 75 references that are in the map. First posted on arXiv 10 Jan 2026.

Builds on

49 of 75 references.

References · 49

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2020Denoising Diffusion Implicit Modelscited by 9,655
  5. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  6. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
  7. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
  8. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  9. 2016Wide Residual Networkscited by 3,057
  10. 2016Improved Techniques for Training GANscited by 2,938
  11. 2016Deep Learning with Differential Privacycited by 2,682
  12. 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
37 more
  1. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
  2. 2020Extracting Training Data from Large Language Modelscited by 2,144
  3. 2019Improved Precision and Recall Metric for Assessing Generative Modelscited by 925
  4. 2017Renyi Differential Privacycited by 643
  5. 2019On Exact Computation with an Infinitely Wide Neural Netcited by 572
  6. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
  7. 2018Differentially Private Generative Adversarial Networkcited by 235
  8. 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
  9. 2021Numerical Composition of Differential Privacycited by 174
  10. 2022Differentially Private Diffusion Modelscited by 118
  11. 2020GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generatorscited by 117
  12. 2023Diffusion Model is an Effective Planner and Data Synthesizer for Multi-Task Reinforcement Learningcited by 114
  13. 2023Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generationcited by 94
  14. 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 89
  15. 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
  16. 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
  17. 2024Constrained Synthesis with Projected Diffusion Modelscited by 83
  18. 2020DP-MERF: Differentially Private Mean Embeddings with Random Features for Practical Privacy-Preserving Data Generationcited by 78
  19. 2023Differentially Private Synthetic Data via Foundation Model APIs 1: Imagescited by 63
  20. 2019G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminatorscited by 53
  21. 2023SoK: Privacy-Preserving Data Synthesiscited by 37
  22. 2024Time Series Diffusion in the Frequency Domaincited by 35
  23. 2022Pre-trained Perceptual Features Improve Differentially Private Image Generationcited by 28
  24. 2023Feature Likelihood Divergence: Evaluating the Generalization of Generative Models Using Samplescited by 25
  25. 2021PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learningcited by 23
  26. 2020Why Spectral Normalization Stabilizes GANs: Analysis and Improvementscited by 21
  27. 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 18
  28. 2024Differentially Private Release of Israel's National Registry of Live Birthscited by 16
  29. 2024Unveiling Differences in Generative Models: A Scalable Differential Clustering Approachcited by 16
  30. 2025GaussMarker: Robust Dual-Domain Watermark for Diffusion Modelscited by 16
  31. 2023Differentially Private Neural Tangent Kernels for Privacy-Preserving Data Generationcited by 15
  32. 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Modelcited by 13
  33. 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 12
  34. 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
  35. 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediariescited by 8
  36. 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesiscited by 6
  37. 2025Can Synthetic Data be Fair and Private? A Comparative Study of Synthetic Data Generation and Fairness Algorithmscited by 4

Built on by

Not cited yet.