{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T22:52:24Z","timestamp":1782255144983,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":88,"publisher":"ACM","funder":[{"name":"The U.S. National Science Foundation","award":["CNS-2220433 and OAC-2319988"],"award-info":[{"award-number":["CNS-2220433 and OAC-2319988"]}]},{"name":"CCI CVN research award"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,11,19]]},"DOI":"10.1145\/3719027.3765045","type":"proceedings-article","created":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T23:42:02Z","timestamp":1763854922000},"page":"4139-4153","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6178-4118","authenticated-orcid":false,"given":"Chen","family":"Gong","sequence":"first","affiliation":[{"name":"University of Virginia, Charlottesville, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-2266-8113","authenticated-orcid":false,"given":"Kecen","family":"Li","sequence":"additional","affiliation":[{"name":"University of Virginia, Charlottesville, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8421-2662","authenticated-orcid":false,"given":"Zinan","family":"Lin","sequence":"additional","affiliation":[{"name":"Microsoft Research, Redmond, WA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9017-7947","authenticated-orcid":false,"given":"Tianhao","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Virginia, Charlottesville, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,11,22]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"51CTO. 2022. Privacy Issues Analysis of the LAION-5B Dataset. https:\/\/www.51cto.com\/article\/777427.html?utm_source=chatgpt.com."},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_2_3_1","volume-title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning. In The Thirty-eighth Conference on Neural Information Processing Systems.","author":"Muthu Selva Annamalai Meenatchi Sundaram","year":"2024","unstructured":"Meenatchi Sundaram Muthu Selva Annamalai and Emiliano De Cristofaro. 2024. Nearly Tight Black-Box Auditing of Differentially Private Machine Learning. In The Thirty-eighth Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_2_4_1","volume-title":"33rd USENIX Security Symposium. 4855-4871","author":"Muthu Selva Annamalai Meenatchi Sundaram","year":"2024","unstructured":"Meenatchi Sundaram Muthu Selva Annamalai, Georgi Ganev, and Emiliano De Cristofaro. 2024. ''What do you want from theory alone?'' Experimenting with Tight Auditing of Differentially Private Synthetic Data Generation. In 33rd USENIX Security Symposium. 4855-4871."},{"key":"e_1_3_2_2_5_1","volume-title":"International conference on machine learning. 214-223","author":"Arjovsky Martin","year":"2017","unstructured":"Martin Arjovsky, Soumith Chintala, and L\u00e9on Bottou. 2017. Wasserstein generative adversarial networks. In International conference on machine learning. 214-223."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1090\/S0002-9947-1950-0051437-7"},{"key":"e_1_3_2_2_7_1","unstructured":"Sanjeev Arora Simon S Du Wei Hu et al. 2019. On exact computation with an infinitely wide neural net. Advances in neural information processing systems Vol. 32 (2019)."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2018.2867350"},{"key":"e_1_3_2_2_9_1","volume-title":"Large Scale GAN Training for High Fidelity Natural Image Synthesis. In 7th International Conference on Learning Representations, ICLR.","author":"Brock Andrew","year":"2019","unstructured":"Andrew Brock, Jeff Donahue, and Karen Simonyan. 2019. Large Scale GAN Training for High Fidelity Natural Image Synthesis. In 7th International Conference on Learning Representations, ICLR."},{"key":"e_1_3_2_2_10_1","volume-title":"A unified view of differentially private deep generative modeling. arXiv:2309.15696","author":"Chen Dingfan","year":"2023","unstructured":"Dingfan Chen, Raouf Kerkouche, and Mario Fritz. 2023. A unified view of differentially private deep generative modeling. arXiv:2309.15696 (2023)."},{"key":"e_1_3_2_2_11_1","unstructured":"Dingfan Chen Tribhuvanesh Orekondy and Mario Fritz. 2020. GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators. In Advances in Neural Information Processing Systems."},{"key":"e_1_3_2_2_12_1","volume-title":"Benchmarking differentially private tabular data synthesis. arXiv preprint arXiv:2504.14061","author":"Chen Kai","year":"2025","unstructured":"Kai Chen, Xiaochen Li, Chen Gong, Ryan McKenna, and Tianhao Wang. 2025. Benchmarking differentially private tabular data synthesis. arXiv preprint arXiv:2504.14061 (2025)."},{"key":"e_1_3_2_2_13_1","volume-title":"Unlocking high-accuracy differentially private image classification through scale. arXiv preprint arXiv:2204.13650","author":"De Soham","year":"2022","unstructured":"Soham De, Leonard Berrada, Jamie Hayes, Samuel L Smith, and Borja Balle. 2022. Unlocking high-accuracy differentially private image classification through scale. arXiv preprint arXiv:2204.13650 (2022)."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"e_1_3_2_2_15_1","unstructured":"Tim Dockhorn Tianshi Cao Arash Vahdat et al. 2023. Differentially Private Diffusion Models. Transactions on Machine Learning Research (2023)."},{"key":"e_1_3_2_2_16_1","volume-title":"Towards principled assessment of tabular data synthesis algorithms. arXiv preprint arXiv:2402.06806","author":"Du Yuntao","year":"2024","unstructured":"Yuntao Du and Ninghui Li. 2024. Towards principled assessment of tabular data synthesis algorithms. arXiv preprint arXiv:2402.06806 (2024)."},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"crossref","unstructured":"Cynthia Dwork Aaron Roth et al. 2014. The algorithmic foundations of differential privacy. Foundations and Trends\u00ae in Theoretical Computer Science (2014) 211-407.","DOI":"10.1561\/0400000042"},{"key":"e_1_3_2_2_19_1","volume-title":"Meenatchi Sundaram Muthu Selva Annamalai, and Emiliano De Cristofaro","author":"Ganev Georgi","year":"2024","unstructured":"Georgi Ganev, Meenatchi Sundaram Muthu Selva Annamalai, and Emiliano De Cristofaro. 2024. The Elusive Pursuit of Replicating PATE-GAN: Benchmarking, Auditing, Debugging. arXiv preprint arXiv:2406.13985 (2024)."},{"key":"e_1_3_2_2_20_1","unstructured":"Sahra Ghalebikesabi Leonard Berrada Sven Gowal et al. 2023. Differentially Private Diffusion Models Generate Useful Synthetic Images. CoRR Vol. abs\/2302.13861 (2023)."},{"key":"e_1_3_2_2_21_1","volume-title":"Dpimagebench: A unified benchmark for differentially private image synthesis. arXiv preprint arXiv:2503.14681","author":"Gong Chen","year":"2025","unstructured":"Chen Gong, Kecen Li, Zinan Lin, and Tianhao Wang. 2025. Dpimagebench: A unified benchmark for differentially private image synthesis. arXiv preprint arXiv:2503.14681 (2025)."},{"key":"e_1_3_2_2_22_1","volume-title":"Nips 2016 tutorial: Generative adversarial networks. arXiv preprint arXiv:1701.00160","author":"Goodfellow Ian","year":"2016","unstructured":"Ian Goodfellow. 2016. Nips 2016 tutorial: Generative adversarial networks. arXiv preprint arXiv:1701.00160 (2016)."},{"key":"e_1_3_2_2_23_1","unstructured":"Ian J. Goodfellow Jean Pouget-Abadie Mehdi Mirza and et al. 2014. Generative Adversarial Nets. In Advances in Neural Information Processing Systems."},{"key":"e_1_3_2_2_24_1","first-page":"723","article-title":". A Kernel Two-Sample Test","volume":"13","author":"Gretton Arthur","year":"2012","unstructured":"Arthur Gretton, Karsten M. Borgwardt, Malte J. Rasch, et al., 2012. A Kernel Two-Sample Test. J. Mach. Learn. Res., Vol. 13 (2012), 723-773.","journal-title":"J. Mach. Learn. Res."},{"key":"e_1_3_2_2_25_1","first-page":"1819","article-title":"DP-MERF","author":"Harder Frederik","year":"2021","unstructured":"Frederik Harder, Kamil Adamczewski, and Mijung Park. 2021. DP-MERF: Differentially Private Mean Embeddings with Random Features for Practical Privacy-preserving Data Generation. In AISTATS. 1819-1827.","journal-title":"In AISTATS."},{"key":"e_1_3_2_2_26_1","article-title":"Pre-trained Perceptual Features Improve Differentially Private Image","volume":"2023","author":"Harder Frederik","year":"2023","unstructured":"Frederik Harder, Milad Jalali, Danica J. Sutherland, and et al., 2023. Pre-trained Perceptual Features Improve Differentially Private Image Generation. Trans. Mach. Learn. Res., Vol. 2023 (2023).","journal-title":"Generation. Trans. Mach. Learn. Res."},{"key":"e_1_3_2_2_27_1","volume-title":"Deep Residual Learning for Image Recognition. In 2016 IEEE Conference on Computer Vision and Pattern Recognition, CVPR. 770-778","author":"He Kaiming","year":"2016","unstructured":"Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016. Deep Residual Learning for Image Recognition. In 2016 IEEE Conference on Computer Vision and Pattern Recognition, CVPR. 770-778."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSTARS.2019.2918242"},{"key":"e_1_3_2_2_29_1","unstructured":"Martin Heusel Hubert Ramsauer Thomas Unterthiner et al. 2017. Gans trained by a two time-scale update rule converge to a local nash equilibrium. Advances in neural information processing systems Vol. 30 (2017)."},{"key":"e_1_3_2_2_30_1","unstructured":"Jonathan Ho Ajay Jain and Pieter Abbeel. 2020. Denoising Diffusion Probabilistic Models. In Advances in Neural Information Processing Systems."},{"key":"e_1_3_2_2_31_1","volume-title":"LoRA: Low-Rank Adaptation of Large Language Models. In The Tenth International Conference on Learning Representations, ICLR.","author":"Hu Edward J.","year":"2022","unstructured":"Edward J. Hu, Yelong Shen, Phillip Wallis, et al., 2022. LoRA: Low-Rank Adaptation of Large Language Models. In The Tenth International Conference on Learning Representations, ICLR."},{"key":"e_1_3_2_2_32_1","volume-title":"SoK: Privacy-Preserving Data Synthesis. In IEEE Symposium on Security and Privacy (SP). 2-2.","author":"Hu Yuzheng","year":"2024","unstructured":"Yuzheng Hu, Fan Wu, Qinbin Li, Yunhui Long, Gonzalo Garrido, Chang Ge, Bolin Ding, David Forsyth, Bo Li, and Dawn Song. 2024. SoK: Privacy-Preserving Data Synthesis. In IEEE Symposium on Security and Privacy (SP). 2-2."},{"key":"e_1_3_2_2_33_1","first-page":"22205","article-title":"Auditing differentially private machine learning: How private is private sgd","volume":"33","author":"Jagielski Matthew","year":"2020","unstructured":"Matthew Jagielski, Jonathan Ullman, and Alina Oprea. 2020. Auditing differentially private machine learning: How private is private sgd? Advances in Neural Information Processing Systems, Vol. 33 (2020), 22205-22216.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_34_1","unstructured":"Dihong Jiang Sun Sun and Yaoliang Yu. 2023. Functional Renyi Differential Privacy for Generative Modeling. In Advances in Neural Information Processing Systems."},{"key":"e_1_3_2_2_35_1","volume-title":"Thirty-seventh Conference on Neural Information Processing Systems.","author":"Jiralerspong Marco","year":"2023","unstructured":"Marco Jiralerspong, Joey Bose, Ian Gemp, et al., 2023. Feature likelihood divergence: evaluating the generalization of generative models using samples. In Thirty-seventh Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_2_36_1","unstructured":"Tero Karras Miika Aittala Timo Aila and Samuli Laine. 2022. Elucidating the Design Space of Diffusion-Based Generative Models. In Advances in Neural Information Processing Systems."},{"key":"e_1_3_2_2_37_1","unstructured":"Alex Krizhevsky. 2009. Learning Multiple Layers of Features from Tiny Images. Technical Report. University of Toronto."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.5555\/3692070.3693097"},{"key":"e_1_3_2_2_39_1","volume-title":"Improved precision and recall metric for assessing generative models. Advances in neural information processing systems","author":"Kynk\u00e4\u00e4nniemi Tuomas","year":"2019","unstructured":"Tuomas Kynk\u00e4\u00e4nniemi, Tero Karras, Samuli Laine, Jaakko Lehtinen, and Timo Aila. 2019. Improved precision and recall metric for assessing generative models. Advances in neural information processing systems, Vol. 32 (2019)."},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_2_41_1","volume-title":"From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis. arXiv preprint arXiv:2504.01395","author":"Li Kecen","year":"2025","unstructured":"Kecen Li, Chen Gong, Xiaochen Li, Yuzhong Zhao, Xinwen Hou, and Tianhao Wang. 2025. From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis. arXiv preprint arXiv:2504.01395 (2025)."},{"key":"e_1_3_2_2_42_1","first-page":"4837","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Li Kecen","year":"2024","unstructured":"Kecen Li, Chen Gong, Zhixiang Li, et al., 2024. PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining. In 33rd USENIX Security Symposium (USENIX Security 24). 4837-4854."},{"key":"e_1_3_2_2_43_1","unstructured":"Zinan Lin. 2022. Data Sharing with Generative Adversarial Networks: From Theory to Practice. Ph.D. Dissertation. Carnegie Mellon University."},{"key":"e_1_3_2_2_44_1","volume-title":"Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model. arXiv preprint arXiv:2502.05505","author":"Lin Zinan","year":"2025","unstructured":"Zinan Lin, Tadas Baltrusaitis, and Sergey Yekhanin. 2025. Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model. arXiv preprint arXiv:2502.05505 (2025)."},{"key":"e_1_3_2_2_45_1","volume-title":"The Twelfth International Conference on Learning Representations.","author":"Lin Zinan","year":"2024","unstructured":"Zinan Lin, Sivakanth Gopi, Janardhan Kulkarni, et al., 2024. Differentially Private Synthetic Data via Foundation Model APIs 1: Images. In The Twelfth International Conference on Learning Representations."},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423643"},{"key":"e_1_3_2_2_47_1","volume-title":"Pacgan: The power of two samples in generative adversarial networks. Advances in neural information processing systems","author":"Lin Zinan","year":"2018","unstructured":"Zinan Lin, Ashish Khetan, Giulia Fanti, and Sewoong Oh. 2018. Pacgan: The power of two samples in generative adversarial networks. Advances in neural information processing systems, Vol. 31 (2018)."},{"key":"e_1_3_2_2_48_1","volume-title":"International Conference on Artificial Intelligence and Statistics. PMLR, 1522-1530","author":"Lin Zinan","year":"2021","unstructured":"Zinan Lin, Vyas Sekar, and Giulia Fanti. 2021a. On the privacy properties of gan-generated samples. In International Conference on Artificial Intelligence and Statistics. PMLR, 1522-1530."},{"key":"e_1_3_2_2_49_1","volume-title":"Why spectral normalization stabilizes gans: Analysis and improvements. Advances in neural information processing systems","author":"Lin Zinan","year":"2021","unstructured":"Zinan Lin, Vyas Sekar, and Giulia Fanti. 2021b. Why spectral normalization stabilizes gans: Analysis and improvements. Advances in neural information processing systems, Vol. 34 (2021), 9625-9638."},{"key":"e_1_3_2_2_50_1","volume-title":"Differentially private latent diffusion models. arXiv preprint arXiv:2305.15759","author":"Liu Michael F","year":"2023","unstructured":"Michael F Liu, Saiyue Lyu, Margarita Vinaroz, and Mijung Park. 2023. Differentially private latent diffusion models. arXiv preprint arXiv:2305.15759 (2023)."},{"key":"e_1_3_2_2_51_1","first-page":"3730","volume-title":"Deep Learning Face Attributes in the Wild. In 2015 IEEE International Conference on Computer Vision, ICCV","author":"Liu Ziwei","year":"2015","unstructured":"Ziwei Liu, Ping Luo, Xiaogang Wang, and et al., 2015. Deep Learning Face Attributes in the Wild. In 2015 IEEE International Conference on Computer Vision, ICCV 2015. 3730-3738."},{"key":"e_1_3_2_2_52_1","volume-title":"Multi-level Gate Feature Aggregation with Spatially Adaptive Batch-Instance Normalization for Semantic Image Synthesis. In 27th International Conference, MMM. 378-390","author":"Long Jia","year":"2021","unstructured":"Jia Long and Hongtao Lu. 2021. Multi-level Gate Feature Aggregation with Spatially Adaptive Batch-Instance Normalization for Semantic Image Synthesis. In 27th International Conference, MMM. 378-390."},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW59333.2023.00013"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.14778\/3551793.3551817"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/1559845.1559850"},{"key":"e_1_3_2_2_56_1","volume-title":"Renyi Differential Privacy. CoRR","author":"Mironov Ilya","year":"2017","unstructured":"Ilya Mironov. 2017. Renyi Differential Privacy. CoRR, Vol. abs\/1702.07476 (2017)."},{"key":"e_1_3_2_2_57_1","volume-title":"R\u00e9nyi Differential Privacy of the Sampled Gaussian Mechanism. CoRR","author":"Mironov Ilya","year":"2019","unstructured":"Ilya Mironov, Kunal Talwar, and Li Zhang. 2019. R\u00e9nyi Differential Privacy of the Sampled Gaussian Mechanism. CoRR, Vol. abs\/1908.10530 (2019). arXiv:1908.10530"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00069"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1613\/jair.1.14649"},{"key":"e_1_3_2_2_60_1","volume-title":"Random features for large-scale kernel machines. Advances in neural information processing systems","author":"Rahimi Ali","year":"2007","unstructured":"Ali Rahimi and Benjamin Recht. 2007. Random features for large-scale kernel machines. Advances in neural information processing systems (2007)."},{"key":"e_1_3_2_2_61_1","unstructured":"Aditya Ramesh Prafulla Dhariwal Alex Nichol et al. 2022. Hierarchical text-conditional image generation with clip latents. arXiv:2204.06125 (2022)."},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"e_1_3_2_2_63_1","volume-title":"Improved techniques for training gans. Advances in neural information processing systems","author":"Salimans Tim","year":"2016","unstructured":"Tim Salimans, Ian Goodfellow, Wojciech Zaremba, Vicki Cheung, Alec Radford, and Xi Chen. 2016. Improved techniques for training gans. Advances in neural information processing systems, Vol. 29 (2016)."},{"key":"e_1_3_2_2_64_1","first-page":"25278","article-title":"Laion-5b: An open large-scale dataset for training next generation image-text models","volume":"35","author":"Schuhmann Christoph","year":"2022","unstructured":"Christoph Schuhmann, Romain Beaumont, Richard Vencu, et al., 2022. Laion-5b: An open large-scale dataset for training next generation image-text models. Advances in Neural Information Processing Systems, Vol. 35 (2022), 25278-25294.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-75225-7_5"},{"key":"e_1_3_2_2_66_1","volume-title":"Veegan: Reducing mode collapse in gans using implicit variational learning. Advances in neural information processing systems","author":"Srivastava Akash","year":"2017","unstructured":"Akash Srivastava, Lazar Valkov, Chris Russell, et al., 2017. Veegan: Reducing mode collapse in gans using implicit variational learning. Advances in neural information processing systems, Vol. 30 (2017)."},{"key":"e_1_3_2_2_67_1","volume-title":"Advances in Neural Information Processing Systems","volume":"36","author":"Steinke Thomas","year":"2023","unstructured":"Thomas Steinke, Milad Nasr, and Matthew Jagielski. 2023. Privacy auditing with one (1) training run. Advances in Neural Information Processing Systems, Vol. 36 (2023)."},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3646547.3689011"},{"key":"e_1_3_2_2_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"e_1_3_2_2_70_1","volume-title":"Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generation. In The Twelfth International Conference on Learning Representations.","author":"Tang Xinyu","unstructured":"Xinyu Tang, Richard Shin, Huseyin A Inan, et al., [n.d.]. Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generation. In The Twelfth International Conference on Learning Representations."},{"key":"e_1_3_2_2_71_1","unstructured":"Yuchao Tao Ryan McKenna Michael Hay et al. 2021. Benchmarking differentially private synthetic data generation algorithms. arXiv:2112.09238 (2021)."},{"key":"e_1_3_2_2_72_1","unstructured":"Yu-Lin Tsai Yizhe Li Zekai Chen et al. 2024. Differentially Private Fine-Tuning of Diffusion Models. arXiv preprint arXiv:2406.01355 (2024)."},{"key":"e_1_3_2_2_73_1","volume-title":"Attention is all you need. Advances in Neural Information Processing Systems","author":"Vaswani A","year":"2017","unstructured":"A Vaswani. 2017. Attention is all you need. Advances in Neural Information Processing Systems (2017)."},{"key":"e_1_3_2_2_74_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298935"},{"key":"e_1_3_2_2_75_1","volume-title":"33rd USENIX Security Symposium. 1063-1080","author":"Wang Haichen","year":"2024","unstructured":"Haichen Wang, Shuchao Pang, Zhigang Lu, et al., 2024. dp-promise: Differentially Private Diffusion Probabilistic Models for Image Synthesis. In 33rd USENIX Security Symposium. 1063-1080."},{"key":"e_1_3_2_2_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616593"},{"key":"e_1_3_2_2_77_1","volume-title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. CoRR","author":"Xiao Han","year":"2017","unstructured":"Han Xiao, Kashif Rasul, and Roland Vollgraf. 2017. Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. CoRR (2017)."},{"key":"e_1_3_2_2_78_1","volume-title":"Forty-first International Conference on Machine Learning.","author":"Xie Chulin","year":"2024","unstructured":"Chulin Xie, Zinan Lin, Arturs Backurs, et al., 2024. Differentially Private Synthetic Data via Foundation Model APIs 2: Text. In Forty-first International Conference on Machine Learning."},{"key":"e_1_3_2_2_79_1","unstructured":"Liyang Xie Kaixiang Lin and et al. 2018. Differentially Private Generative Adversarial Network. CoRR Vol. abs\/1802.06739 (2018)."},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.634"},{"key":"e_1_3_2_2_81_1","volume-title":"Advances in Neural Information Processing Systems","volume":"36","author":"Xu Jiazheng","year":"2024","unstructured":"Jiazheng Xu, Xiao Liu, Yuchen Wu, et al., 2024. Imagereward: Learning and evaluating human preferences for text-to-image generation. Advances in Neural Information Processing Systems, Vol. 36 (2024)."},{"key":"e_1_3_2_2_82_1","volume-title":"Attend and Tell: Neural Image Caption Generation with Visual Attention. In Proceedings of the 32nd International Conference on Machine Learning","volume":"37","author":"Xu Kelvin","year":"2048","unstructured":"Kelvin Xu, Jimmy Ba, Ryan Kiros, and et al., 2015. Show, Attend and Tell: Neural Image Caption Generation with Visual Attention. In Proceedings of the 32nd International Conference on Machine Learning, Vol. 37. 2048-2057."},{"key":"e_1_3_2_2_83_1","unstructured":"Yilin Yang Kamil Adamczewski and et al. 2023. Differentially Private Neural Tangent Kernels for Privacy-Preserving Data Generation. CoRR Vol. abs\/2303.01687 (2023)."},{"key":"e_1_3_2_2_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544216.3544251"},{"key":"e_1_3_2_2_85_1","volume-title":"Jian Yin, and Huishuai Zhang.","author":"Yu Da","year":"2023","unstructured":"Da Yu, Sivakanth Gopi, Janardhan Kulkarni, Zinan Lin, Saurabh Naik, Tomasz Lukasz Religa, Jian Yin, and Huishuai Zhang. 2023. Selective pre-training for private fine-tuning. arXiv preprint arXiv:2305.13865 (2023)."},{"key":"e_1_3_2_2_86_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.acl-long.74"},{"key":"e_1_3_2_2_87_1","volume-title":"Wide residual networks. arXiv:1605.07146","author":"Zagoruyko Sergey","year":"2016","unstructured":"Sergey Zagoruyko. 2016. Wide residual networks. arXiv:1605.07146 (2016)."},{"key":"e_1_3_2_2_88_1","volume-title":"Places: A 10 million image database for scene recognition","author":"Zhou Bolei","year":"2017","unstructured":"Bolei Zhou, Agata Lapedriza, Aditya Khosla, et al., 2017. Places: A 10 million image database for scene recognition. IEEE transactions on pattern analysis and machine intelligence, Vol. 40 (2017), 1452-1464."}],"event":{"name":"CCS '25: ACM SIGSAC Conference on Computer and Communications Security","location":"Taipei Taiwan","acronym":"CCS '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3719027.3765045","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T22:27:41Z","timestamp":1766442461000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3719027.3765045"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,19]]},"references-count":88,"alternative-id":["10.1145\/3719027.3765045","10.1145\/3719027"],"URL":"https:\/\/doi.org\/10.1145\/3719027.3765045","relation":{},"subject":[],"published":{"date-parts":[[2025,11,19]]},"assertion":[{"value":"2025-11-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}