{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T16:07:53Z","timestamp":1774541273839,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":14,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T00:00:00Z","timestamp":1691107200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,6]]},"DOI":"10.1145\/3580305.3599561","type":"proceedings-article","created":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T18:13:58Z","timestamp":1691172838000},"page":"5823-5824","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["How to DP-fy ML: A Practical Tutorial to Machine Learning with Differential Privacy"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-6761-1468","authenticated-orcid":false,"given":"Natalia","family":"Ponomareva","sequence":"first","affiliation":[{"name":"Google Research, New York, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0235-1624","authenticated-orcid":false,"given":"Sergei","family":"Vassilvitskii","sequence":"additional","affiliation":[{"name":"Google Research, New York, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6747-3953","authenticated-orcid":false,"given":"Zheng","family":"Xu","sequence":"additional","affiliation":[{"name":"Google Research, Mountain View, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-5892-4193","authenticated-orcid":false,"given":"Brendan","family":"McMahan","sequence":"additional","affiliation":[{"name":"Google Research, Seattle, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5952-9394","authenticated-orcid":false,"given":"Alexey","family":"Kurakin","sequence":"additional","affiliation":[{"name":"Google Research, Mountain View, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8467-1888","authenticated-orcid":false,"given":"Chiyaun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Google Research, Mountain View, USA"}]}],"member":"320","published-online":{"date-parts":[[2023,8,4]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_2_2_1","volume-title":"Plume: Differential Privacy at Scale. CoRR","author":"Amin Kareem","year":"2022","unstructured":"Kareem Amin , Jennifer Gillenwater , Matthew Joseph , Alex Kulesza , and Sergei Vassilvitskii . 2022 . Plume: Differential Privacy at Scale. CoRR , Vol. abs\/ 2201 .11603 (2022). showeprint[arXiv]2201.11603 https:\/\/arxiv.org\/abs\/2201.11603 Kareem Amin, Jennifer Gillenwater, Matthew Joseph, Alex Kulesza, and Sergei Vassilvitskii. 2022. Plume: Differential Privacy at Scale. CoRR , Vol. abs\/2201.11603 (2022). showeprint[arXiv]2201.11603 https:\/\/arxiv.org\/abs\/2201.11603"},{"key":"e_1_3_2_2_3_1","volume-title":"Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom B. Brown, Dawn Song, \u00da lfar Erlingsson, Alina Oprea, and Colin Raffel.","author":"Carlini Nicholas","year":"2020","unstructured":"Nicholas Carlini , Florian Tram\u00e8 r , Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom B. Brown, Dawn Song, \u00da lfar Erlingsson, Alina Oprea, and Colin Raffel. 2020 . Extracting Training Data from Large Language Models. CoRR , Vol. abs\/ 2012 .07805 (2020). showeprint[arXiv]2012.07805 https:\/\/arxiv.org\/abs\/2012.07805 Nicholas Carlini, Florian Tram\u00e8 r, Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom B. Brown, Dawn Song, \u00da lfar Erlingsson, Alina Oprea, and Colin Raffel. 2020. Extracting Training Data from Large Language Models. CoRR , Vol. abs\/2012.07805 (2020). showeprint[arXiv]2012.07805 https:\/\/arxiv.org\/abs\/2012.07805"},{"key":"e_1_3_2_2_4_1","volume-title":"International conference on machine learning. PMLR, 448--456","author":"Ioffe Sergey","year":"2015","unstructured":"Sergey Ioffe and Christian Szegedy . 2015 . Batch normalization: Accelerating deep network training by reducing internal covariate shift . In International conference on machine learning. PMLR, 448--456 . Sergey Ioffe and Christian Szegedy. 2015. Batch normalization: Accelerating deep network training by reducing internal covariate shift. In International conference on machine learning. PMLR, 448--456."},{"key":"e_1_3_2_2_5_1","volume-title":"International Conference on Machine Learning (ICML). 5213--5225","author":"Kairouz Peter","year":"2021","unstructured":"Peter Kairouz , Brendan Mcmahan , Shuang Song , Om Thakkar , Abhradeep Thakurta , and Zheng Xu . 2021 b. Practical and Private (Deep) Learning Without Sampling or Shuffling . In International Conference on Machine Learning (ICML). 5213--5225 . Peter Kairouz, Brendan Mcmahan, Shuang Song, Om Thakkar, Abhradeep Thakurta, and Zheng Xu. 2021b. Practical and Private (Deep) Learning Without Sampling or Shuffling. In International Conference on Machine Learning (ICML). 5213--5225."},{"key":"e_1_3_2_2_6_1","volume-title":"Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings, et al.","author":"Kairouz Peter","year":"2021","unstructured":"Peter Kairouz , H Brendan McMahan , Brendan Avent , Aur\u00e9lien Bellet , Mehdi Bennis , Arjun Nitin Bhagoji , Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings, et al. 2021 a. Advances and open problems in federated learning. Foundations and Trends\u00ae in Machine Learning , Vol. 14 , 1--2 (2021), 1--210. Peter Kairouz, H Brendan McMahan, Brendan Avent, Aur\u00e9lien Bellet, Mehdi Bennis, Arjun Nitin Bhagoji, Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings, et al. 2021a. Advances and open problems in federated learning. Foundations and Trends\u00ae in Machine Learning, Vol. 14, 1--2 (2021), 1--210."},{"key":"e_1_3_2_2_7_1","volume-title":"SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processing. CoRR","author":"Kudo Taku","year":"2018","unstructured":"Taku Kudo and John Richardson . 2018. SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processing. CoRR , Vol. abs\/ 1808 .06226 ( 2018 ). showeprint[arXiv]1808.06226 http:\/\/arxiv.org\/abs\/1808.06226 Taku Kudo and John Richardson. 2018. SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processing. CoRR , Vol. abs\/1808.06226 (2018). showeprint[arXiv]1808.06226 http:\/\/arxiv.org\/abs\/1808.06226"},{"key":"e_1_3_2_2_8_1","unstructured":"Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017. Communication-efficient learning of deep networks from decentralized data. In Artificial intelligence and statistics. PMLR 1273--1282.  Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017. Communication-efficient learning of deep networks from decentralized data. In Artificial intelligence and statistics. PMLR 1273--1282."},{"key":"e_1_3_2_2_9_1","volume-title":"Learning Differentially Private Recurrent Language Models. In International Conference on Learning Representations (ICLR). https:\/\/openreview.net\/pdf?id=BJ0hF1Z0b","author":"McMahan Brendan","year":"2018","unstructured":"Brendan McMahan , Daniel Ramage , Kunal Talwar , and Li Zhang . 2018 . Learning Differentially Private Recurrent Language Models. In International Conference on Learning Representations (ICLR). https:\/\/openreview.net\/pdf?id=BJ0hF1Z0b Brendan McMahan, Daniel Ramage, Kunal Talwar, and Li Zhang. 2018. Learning Differentially Private Recurrent Language Models. In International Conference on Learning Representations (ICLR). https:\/\/openreview.net\/pdf?id=BJ0hF1Z0b"},{"key":"e_1_3_2_2_10_1","volume-title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy. CoRR","author":"Ponomareva Natalia","year":"2023","unstructured":"Natalia Ponomareva , Hussein Hazimeh , Alex Kurakin , Zheng Xu , Carson Denison , H. Brendan McMahan , Sergei Vassilvitskii , Steve Chien , and Abhradeep Guha Thakurta . 2023. How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy. CoRR ( 2023 ). Natalia Ponomareva, Hussein Hazimeh, Alex Kurakin, Zheng Xu, Carson Denison, H. Brendan McMahan, Sergei Vassilvitskii, Steve Chien, and Abhradeep Guha Thakurta. 2023. How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy. CoRR (2023)."},{"key":"e_1_3_2_2_11_1","unstructured":"Abhradeep Thakurta and Brendan McMahan. 2022. Federated Learning with Formal Differential Privacy Guarantees. https:\/\/ai.googleblog.com\/2022\/02\/federated-learning-with-formal.html  Abhradeep Thakurta and Brendan McMahan. 2022. Federated Learning with Formal Differential Privacy Guarantees. https:\/\/ai.googleblog.com\/2022\/02\/federated-learning-with-formal.html"},{"key":"e_1_3_2_2_12_1","unstructured":"Yonghui Wu and Mike Schuster et al. 2016. Google's Neural Machine Translation System: Bridging the Gap between Human and Machine Translation. CoRR Vol. abs\/1609.08144 (2016). showeprint[arXiv]1609.08144 http:\/\/arxiv.org\/abs\/1609.08144  Yonghui Wu and Mike Schuster et al. 2016. Google's Neural Machine Translation System: Bridging the Gap between Human and Machine Translation. CoRR Vol. abs\/1609.08144 (2016). showeprint[arXiv]1609.08144 http:\/\/arxiv.org\/abs\/1609.08144"},{"key":"e_1_3_2_2_13_1","volume-title":"Learning to Generate Image Embeddings with User-level Differential Privacy. arXiv preprint arXiv:2211.10844","author":"Xu Zheng","year":"2022","unstructured":"Zheng Xu , Maxwell Collins , Yuxiao Wang , Liviu Panait , Sewoong Oh , Sean Augenstein , Ting Liu , Florian Schroff , and H Brendan McMahan . 2022. Learning to Generate Image Embeddings with User-level Differential Privacy. arXiv preprint arXiv:2211.10844 ( 2022 ). Zheng Xu, Maxwell Collins, Yuxiao Wang, Liviu Panait, Sewoong Oh, Sean Augenstein, Ting Liu, Florian Schroff, and H Brendan McMahan. 2022. Learning to Generate Image Embeddings with User-level Differential Privacy. arXiv preprint arXiv:2211.10844 (2022)."},{"key":"e_1_3_2_2_14_1","unstructured":"Zheng Xu Yanxiang Zhang Galen Andrew Christopher Choquette Peter Kairouz Brendan McMahan Jesse Rosenstock and Yuanbo Zhang. 2023. Federated Learning of Gboard Language Models with Differential Privacy.  Zheng Xu Yanxiang Zhang Galen Andrew Christopher Choquette Peter Kairouz Brendan McMahan Jesse Rosenstock and Yuanbo Zhang. 2023. Federated Learning of Gboard Language Models with Differential Privacy."}],"event":{"name":"KDD '23: The 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Long Beach CA USA","acronym":"KDD '23","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580305.3599561","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3580305.3599561","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:37:52Z","timestamp":1750178272000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580305.3599561"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,4]]},"references-count":14,"alternative-id":["10.1145\/3580305.3599561","10.1145\/3580305"],"URL":"https:\/\/doi.org\/10.1145\/3580305.3599561","relation":{},"subject":[],"published":{"date-parts":[[2023,8,4]]},"assertion":[{"value":"2023-08-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}