Tight Auditing of Differential Privacy in MST and AIM
Not on the map. Why?
Abstract (arXiv)
State-of-the-art Differentially Private (DP) synthetic data generators such as MST and AIM are widely used, yet tightly auditing their privacy guarantees remains challenging. We introduce a Gaussian Differential Privacy (GDP)-based auditing framework that measures privacy via the full false-positive/false-negative tradeoff. Applied to MST and AIM under worst-case settings, our method provides the first tight audits in the strong-privacy regime. For (ε,δ)=(1,10-2), we obtain μemp≈0.43 vs. implied μ=0.45, showing a small theory-practice gap. Our code is publicly available: https://github.com/sassoftware/dpmm.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 26 of its 37 references that are in the map. First posted on arXiv 20 Apr 2026.
Builds on
26 of 37 references.
References · 26
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,120
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 193
- 2020The Discrete Gaussian for Differential Privacycited by 134
- 2023Privacy Auditing with One (1) Training Runcited by 119
- 2021Winning the NIST Contest: A scalable and general approach to differentially private synthetic datacited by 101
- 2022AIM: An Adaptive and Iterative Mechanism for Differentially Private Synthetic Datacited by 88
- 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 80
- 2019Graphical-model based estimation and inference for differential privacycited by 73
- 2022TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Datacited by 56
- 2021Robin Hood and Matthew Effects: Differential Privacy Has Disparate Impact on Synthetic Datacited by 48
14 more
- 2022Bayesian Estimation of Differential Privacycited by 31
- 2020Three Variants of Differential Privacy: Lossless Conversion and Applicationscited by 25
- 2024"What do you want from theory alone?" Experimenting with Tight Auditing of Differentially Private Synthetic Data Generationcited by 20
- 2023Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utilitycited by 13
- 2025Benchmarking Differentially Private Tabular Data Synthesiscited by 13
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 12
- 2023Synthetic Data: Methods, Use Cases, and Riskscited by 10
- 2022Widespread Underestimation of Sensitivity in Differentially Private Libraries and How to Fix Itcited by 8
- 2022Precision-based attacks and interval refining: how to break, then fix, differential privacy on finite computerscited by 8
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learningcited by 6
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Datacited by 4
- 2025The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditingcited by 4
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generationcited by 2
- 2026Optimal conversion from R'enyi Differential Privacy to f-Differential Privacycited by 1
Built on by
Not cited yet.