{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,28]],"date-time":"2026-09-28T22:31:12Z","timestamp":1790634672491,"version":"4.1.0"},"reference-count":53,"publisher":"Association for Computing Machinery (ACM)","issue":"11","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2022,7]]},"abstract":"<jats:p>Deep neural networks have strong capabilities of memorizing the underlying training data, which can be a serious privacy concern. An effective solution to this problem is to train models with<jats:italic>differential privacy<\/jats:italic>(<jats:italic>DP<\/jats:italic>), which provides rigorous privacy guarantees by injecting random noise to the gradients. This paper focuses on the scenario where sensitive data are distributed among multiple participants, who jointly train a model through<jats:italic>federated learning<\/jats:italic>, using both<jats:italic>secure multiparty computation<\/jats:italic>(<jats:italic>MPC<\/jats:italic>) to ensure the confidentiality of each gradient update, and differential privacy to avoid data leakage in the resulting model. A major challenge in this setting is that common mechanisms for enforcing DP in deep learning, which inject<jats:italic>real-valued noise<\/jats:italic>, are fundamentally incompatible with MPC, which exchanges<jats:italic>finite-field integers<\/jats:italic>among the participants. Consequently, most existing DP mechanisms require rather high noise levels, leading to poor model utility.<\/jats:p><jats:p>Motivated by this, we propose<jats:italic>Skellam mixture mechanism<\/jats:italic>(SMM), a novel approach to enforcing DP on models built via federated learning. Compared to existing methods, SMM eliminates the assumption that the input gradients must be integer-valued, and, thus, reduces the amount of noise injected to preserve DP. The theoretical analysis of SMM is highly non-trivial, especially considering (i) the complicated math of DP deep learning in general and (ii) the fact that the mixture of two Skellam distributions is rather complex. Extensive experiments on various practical settings demonstrate that SMM consistently and significantly outperforms existing solutions in terms of the utility of the resulting model.<\/jats:p>","DOI":"10.14778\/3551793.3551798","type":"journal-article","created":{"date-parts":[[2022,9,29]],"date-time":"2022-09-29T22:25:03Z","timestamp":1664490303000},"page":"2348-2360","source":"Crossref","is-referenced-by-count":17,"title":["Skellam mixture mechanism"],"prefix":"10.14778","volume":"15","author":[{"given":"Ergute","family":"Bao","sequence":"first","affiliation":[{"name":"National University of Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yizheng","family":"Zhu","sequence":"additional","affiliation":[{"name":"National University of Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaokui","family":"Xiao","sequence":"additional","affiliation":[{"name":"National University of Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yin","family":"Yang","sequence":"additional","affiliation":[{"name":"Hamad Bin Khalifa University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Beng Chin","family":"Ooi","sequence":"additional","affiliation":[{"name":"National University of Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Benjamin Hong Meng","family":"Tan","sequence":"additional","affiliation":[{"name":"A*STAR, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khin Mi Mi","family":"Aung","sequence":"additional","affiliation":[{"name":"A*STAR, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,9,29]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Mart\u00edn Abadi Paul Barham Jianmin Chen Zhifeng Chen Andy Davis Jeffrey Dean Matthieu Devin Sanjay Ghemawat Geoffrey Irving Michael Isard Manjunath Kudlur Josh Levenberg Rajat Monga Sherry Moore Derek G. Murray Benoit Steiner Paul Tucker Vijay Vasudevan Pete Warden Martin Wicke Yuan Yu and Xiaoqiang Zheng. 2016. TensorFlow: A System for Large-Scale Machine Learning. In OSDI. 265--283. Mart\u00edn Abadi Paul Barham Jianmin Chen Zhifeng Chen Andy Davis Jeffrey Dean Matthieu Devin Sanjay Ghemawat Geoffrey Irving Michael Isard Manjunath Kudlur Josh Levenberg Rajat Monga Sherry Moore Derek G. Murray Benoit Steiner Paul Tucker Vijay Vasudevan Pete Warden Martin Wicke Yuan Yu and Xiaoqiang Zheng. 2016. TensorFlow: A System for Large-Scale Machine Learning. In OSDI. 265--283."},{"key":"e_1_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Mart\u00edn Abadi Andy Chu Ian J. Goodfellow H. Brendan McMahan Ilya Mironov Kunal Talwar and Li Zhang. 2016. Deep Learning with Differential Privacy. In CCS. 308--318. Mart\u00edn Abadi Andy Chu Ian J. Goodfellow H. Brendan McMahan Ilya Mironov Kunal Talwar and Li Zhang. 2016. Deep Learning with Differential Privacy. In CCS. 308--318.","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_2_1_3_1","unstructured":"Naman Agarwal Peter Kairouz and Ziyu Liu. 2021. The Skellam Mechanism for Differentially Private Federated Learning. In NeurIPS. 5052--5064. Naman Agarwal Peter Kairouz and Ziyu Liu. 2021. The Skellam Mechanism for Differentially Private Federated Learning. In NeurIPS. 5052--5064."},{"key":"e_1_2_1_4_1","volume-title":"Felix Yu, Sanjiv Kumar, and H. Brendan McMahan.","author":"Agarwal Naman","year":"2018","unstructured":"Naman Agarwal , Ananda Theertha Suresh , Felix Yu, Sanjiv Kumar, and H. Brendan McMahan. 2018 . CpSGD: Communication- Efficient and Differentially-Private Distributed SGD. In NeurIPS. 7575--7586. Naman Agarwal, Ananda Theertha Suresh, Felix Yu, Sanjiv Kumar, and H. Brendan McMahan. 2018. CpSGD: Communication-Efficient and Differentially-Private Distributed SGD. In NeurIPS. 7575--7586."},{"key":"e_1_2_1_5_1","volume-title":"Aarushi Goel, and Abhishek Jain.","author":"Ananth Prabhanjan","year":"2018","unstructured":"Prabhanjan Ananth , Arka Rai Choudhuri , Aarushi Goel, and Abhishek Jain. 2018 . Round-Optimal Secure Multiparty Computation with Honest Majority. In CRYPTO. 395--424. Prabhanjan Ananth, Arka Rai Choudhuri, Aarushi Goel, and Abhishek Jain. 2018. Round-Optimal Secure Multiparty Computation with Honest Majority. In CRYPTO. 395--424."},{"key":"e_1_2_1_6_1","volume-title":"Retrieved","author":"Bao Ergute","year":"2022","unstructured":"Ergute Bao , Yizheng Zhu , Xiaokui Xiao , Yin Yang , Beng Chin Ooi , Benjamin Hong Meng Tan , and Khin Mi Mi Aung . 2022 . Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy (Technical report) . Retrieved May 15, 2022 from https:\/\/drive.google.com\/file\/d\/1k6HILAQC5_mwjFflQ-VJazBuRfrDurfU\/view?usp=sharing Ergute Bao, Yizheng Zhu, Xiaokui Xiao, Yin Yang, Beng Chin Ooi, Benjamin Hong Meng Tan, and Khin Mi Mi Aung. 2022. Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy (Technical report). Retrieved May 15, 2022 from https:\/\/drive.google.com\/file\/d\/1k6HILAQC5_mwjFflQ-VJazBuRfrDurfU\/view?usp=sharing"},{"key":"e_1_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Amos Beimel Ariel Gabizon Yuval Ishai Eyal Kushilevitz Sigurd Meldgaard and Anat Paskin-Cherniavsky. 2014. Non-Interactive Secure Multiparty Computation. In CRYPTO. 387--404. Amos Beimel Ariel Gabizon Yuval Ishai Eyal Kushilevitz Sigurd Meldgaard and Anat Paskin-Cherniavsky. 2014. Non-Interactive Secure Multiparty Computation. In CRYPTO. 387--404.","DOI":"10.1007\/978-3-662-44381-1_22"},{"key":"e_1_2_1_8_1","unstructured":"James Henry Bell Kallista A. Bonawitz Adri\u00e0 Gasc\u00f3n Tancr\u00e8de Lepoint and Mariana Raykova. 2020. Secure Single-Server Aggregation with (Poly)Logarithmic Overhead. In CCS. 1253--1269. James Henry Bell Kallista A. Bonawitz Adri\u00e0 Gasc\u00f3n Tancr\u00e8de Lepoint and Mariana Raykova. 2020. Secure Single-Server Aggregation with (Poly)Logarithmic Overhead. In CCS. 1253--1269."},{"key":"e_1_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Keith Bonawitz Vladimir Ivanov Ben Kreuter Antonio Marcedone H. Brendan McMahan Sarvar Patel Daniel Ramage Aaron Segal and Karn Seth. 2017. Practical Secure Aggregation for Privacy-Preserving Machine Learning. In CCS. 1175--1191. Keith Bonawitz Vladimir Ivanov Ben Kreuter Antonio Marcedone H. Brendan McMahan Sarvar Patel Daniel Ramage Aaron Segal and Karn Seth. 2017. Practical Secure Aggregation for Privacy-Preserving Machine Learning. In CCS. 1175--1191.","DOI":"10.1145\/3133956.3133982"},{"key":"e_1_2_1_10_1","unstructured":"Tom Brown Benjamin Mann Nick Ryder Melanie Subbiah Jared D Kaplan Prafulla Dhariwal Arvind Neelakantan Pranav Shyam Girish Sastry Amanda Askell Sandhini Agarwal Ariel Herbert-Voss Gretchen Krueger Tom Henighan Rewon Child Aditya Ramesh Daniel Ziegler Jeffrey Wu Clemens Winter Chris Hesse Mark Chen Eric Sigler Mateusz Litwin Scott Gray Benjamin Chess Jack Clark Christopher Berner Sam McCandlish Alec Radford Ilya Sutskever and Dario Amodei. 2020. Language Models are Few-Shot Learners. In NeurIPS. 1877--1901. Tom Brown Benjamin Mann Nick Ryder Melanie Subbiah Jared D Kaplan Prafulla Dhariwal Arvind Neelakantan Pranav Shyam Girish Sastry Amanda Askell Sandhini Agarwal Ariel Herbert-Voss Gretchen Krueger Tom Henighan Rewon Child Aditya Ramesh Daniel Ziegler Jeffrey Wu Clemens Winter Chris Hesse Mark Chen Eric Sigler Mateusz Litwin Scott Gray Benjamin Chess Jack Clark Christopher Berner Sam McCandlish Alec Radford Ilya Sutskever and Dario Amodei. 2020. Language Models are Few-Shot Learners. In NeurIPS. 1877--1901."},{"key":"e_1_2_1_11_1","unstructured":"Cl\u00e9ment L. Canonne Gautam Kamath and Thomas Steinke. 2020. The Discrete Gaussian for Differential Privacy. In NeurIPS. Cl\u00e9ment L. Canonne Gautam Kamath and Thomas Steinke. 2020. The Discrete Gaussian for Differential Privacy. In NeurIPS."},{"key":"e_1_2_1_12_1","unstructured":"Nicholas Carlini Chang Liu \u00dalfar Erlingsson Jernej Kos and Dawn Song. 2019. The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks. In SEC. 267--284. Nicholas Carlini Chang Liu \u00dalfar Erlingsson Jernej Kos and Dawn Song. 2019. The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks. In SEC. 267--284."},{"key":"e_1_2_1_13_1","volume-title":"Multiparty Computations Ensuring Privacy of Each Party's Input and Correctness of the Result","author":"Chaum David","unstructured":"David Chaum , Ivan Damg\u00e5rd , and Jeroen van de Graaf . 1987. Multiparty Computations Ensuring Privacy of Each Party's Input and Correctness of the Result . In CRYPTO. Springer , 87--119. David Chaum, Ivan Damg\u00e5rd, and Jeroen van de Graaf. 1987. Multiparty Computations Ensuring Privacy of Each Party's Input and Correctness of the Result. In CRYPTO. Springer, 87--119."},{"key":"e_1_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Albert Cheu Adam D. Smith Jonathan R. Ullman David Zeber and Maxim Zhilyaev. 2019. Distributed Differential Privacy via Shuffling. In EUROCRYPT. 375--403. Albert Cheu Adam D. Smith Jonathan R. Ullman David Zeber and Maxim Zhilyaev. 2019. Distributed Differential Privacy via Shuffling. In EUROCRYPT. 375--403.","DOI":"10.1007\/978-3-030-17653-2_13"},{"key":"e_1_2_1_15_1","volume-title":"Ng","author":"Coates Adam","year":"2013","unstructured":"Adam Coates , Brody Huval , Tao Wang , David J. Wu , Bryan Catanzaro , and Andrew Y . Ng . 2013 . Deep learning with COTS HPC systems. In ICML. 1337--1345. Adam Coates, Brody Huval, Tao Wang, David J. Wu, Bryan Catanzaro, and Andrew Y. Ng. 2013. Deep learning with COTS HPC systems. In ICML. 1337--1345."},{"key":"e_1_2_1_16_1","volume-title":"Secure Multiparty Computation and Secret Sharing","author":"Cramer Ronald","unstructured":"Ronald Cramer , Ivan Damg\u00e5rd , and Jesper Buus Nielsen . 2015. Secure Multiparty Computation and Secret Sharing . Cambridge University Press . Ronald Cramer, Ivan Damg\u00e5rd, and Jesper Buus Nielsen. 2015. Secure Multiparty Computation and Secret Sharing. Cambridge University Press."},{"key":"e_1_2_1_17_1","volume-title":"Ng","author":"Dean Jeffrey","year":"2012","unstructured":"Jeffrey Dean , Greg Corrado , Rajat Monga , Kai Chen , Matthieu Devin , Quoc V. Le , Mark Z. Mao , Marc'Aurelio Ranzato , Andrew W. Senior , Paul A. Tucker , Ke Yang , and Andrew Y . Ng . 2012 . Large Scale Distributed Deep Networks. In NeurIPS. 1232--1240. Jeffrey Dean, Greg Corrado, Rajat Monga, Kai Chen, Matthieu Devin, Quoc V. Le, Mark Z. Mao, Marc'Aurelio Ranzato, Andrew W. Senior, Paul A. Tucker, Ke Yang, and Andrew Y. Ng. 2012. Large Scale Distributed Deep Networks. In NeurIPS. 1232--1240."},{"key":"e_1_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Cynthia Dwork Frank McSherry Kobbi Nissim and Adam Smith. 2006. Calibrating noise to sensitivity in private data analysis. In TCC. 265--284. Cynthia Dwork Frank McSherry Kobbi Nissim and Adam Smith. 2006. Calibrating noise to sensitivity in private data analysis. In TCC. 265--284.","DOI":"10.1007\/11681878_14"},{"key":"e_1_2_1_19_1","first-page":"3","article-title":"The Algorithmic Foundations of Differential Privacy","volume":"9","author":"Dwork Cynthia","year":"2014","unstructured":"Cynthia Dwork and Aaron Roth . 2014 . The Algorithmic Foundations of Differential Privacy . Found. Trends Theor. Comput. Sci. 9 , 3 -- 4 (2014), 211--407. Cynthia Dwork and Aaron Roth. 2014. The Algorithmic Foundations of Differential Privacy. Found. Trends Theor. Comput. Sci. 9, 3--4 (2014), 211--407.","journal-title":"Found. Trends Theor. Comput. Sci."},{"key":"e_1_2_1_20_1","doi-asserted-by":"crossref","unstructured":"Cynthia Dwork Adam D. Smith Thomas Steinke Jonathan R. Ullman and Salil P. Vadhan.2015. Robust Traceability from Trace Amounts. In FOCS. 650--669. Cynthia Dwork Adam D. Smith Thomas Steinke Jonathan R. Ullman and Salil P. Vadhan.2015. Robust Traceability from Trace Amounts. In FOCS. 650--669.","DOI":"10.1109\/FOCS.2015.46"},{"key":"e_1_2_1_21_1","doi-asserted-by":"crossref","unstructured":"\u00dalfar Erlingsson Vitaly Feldman Ilya Mironov Ananth Raghunathan Kunal Talwar and Abhradeep Thakurta. 2019. Amplification by Shuffling: From Local to Central Differential Privacy via Anonymity. In SODA. 2468--2479. \u00dalfar Erlingsson Vitaly Feldman Ilya Mironov Ananth Raghunathan Kunal Talwar and Abhradeep Thakurta. 2019. Amplification by Shuffling: From Local to Central Differential Privacy via Anonymity. In SODA. 2468--2479.","DOI":"10.1137\/1.9781611975482.151"},{"key":"e_1_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Vitaly Feldman. 2020. Does Learning Require Memorization? A Short Tale about a Long Tail. In STOC. 954--959. Vitaly Feldman. 2020. Does Learning Require Memorization? A Short Tale about a Long Tail. In STOC. 954--959.","DOI":"10.1145\/3357713.3384290"},{"key":"e_1_2_1_23_1","doi-asserted-by":"crossref","unstructured":"Rosario Gennaro Yuval Ishai Eyal Kushilevitz and Tal Rabin. 2002. On 2-Round Secure Multiparty Computation. In CRYPTO. 178--193. Rosario Gennaro Yuval Ishai Eyal Kushilevitz and Tal Rabin. 2002. On 2-Round Secure Multiparty Computation. In CRYPTO. 178--193.","DOI":"10.1007\/3-540-45708-9_12"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2457317.2457343"},{"key":"e_1_2_1_25_1","doi-asserted-by":"crossref","unstructured":"Anupam Gupta Katrina Ligett Frank McSherry Aaron Roth and Kunal Talwar. 2010. Differentially Private Combinatorial Optimization. In SODA. 1106--1125. Anupam Gupta Katrina Ligett Frank McSherry Aaron Roth and Kunal Talwar. 2010. Differentially Private Combinatorial Optimization. In SODA. 1106--1125.","DOI":"10.1137\/1.9781611973075.90"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1176344370"},{"key":"e_1_2_1_27_1","doi-asserted-by":"crossref","unstructured":"Yuval Ishai Eyal Kushilevitz and Anat Paskin. 2010. Secure Multiparty Computation with Minimal Interaction. In CRYPTO. 577--594. Yuval Ishai Eyal Kushilevitz and Anat Paskin. 2010. Secure Multiparty Computation with Minimal Interaction. In CRYPTO. 577--594.","DOI":"10.1007\/978-3-642-14623-7_31"},{"key":"e_1_2_1_28_1","unstructured":"Peter Kairouz Ziyu Liu and Thomas Steinke. 2021. The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation. In ICML. 5201--5212. Peter Kairouz Ziyu Liu and Thomas Steinke. 2021. The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation. In ICML. 5201--5212."},{"key":"e_1_2_1_29_1","volume-title":"Kingma and Jimmy Ba","author":"Diederik","year":"2015","unstructured":"Diederik P. Kingma and Jimmy Ba . 2015 . Adam : A Method for Stochastic Optimization. In ICLR. Diederik P. Kingma and Jimmy Ba. 2015. Adam: A Method for Stochastic Optimization. In ICLR."},{"key":"e_1_2_1_30_1","unstructured":"Antti Koskela Joonas J\u00e4lk\u00f6 Lukas Prediger and Antti Honkela. 2021. Tight Differential Privacy for Discrete-Valued Mechanisms and for the Subsampled Gaussian Mechanism Using FFT. In AISTATS. 3358--3366. Antti Koskela Joonas J\u00e4lk\u00f6 Lukas Prediger and Antti Honkela. 2021. Tight Differential Privacy for Discrete-Valued Mechanisms and for the Subsampled Gaussian Mechanism Using FFT. In AISTATS. 3358--3366."},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_2_1_32_1","doi-asserted-by":"crossref","unstructured":"Jingcheng Liu and Kunal Talwar. 2019. Private Selection from Private Candidates. In STOC. 298--309. Jingcheng Liu and Kunal Talwar. 2019. Private Selection from Private Candidates. In STOC. 298--309.","DOI":"10.1145\/3313276.3316377"},{"key":"e_1_2_1_33_1","unstructured":"Ryan T. McDonald Keith B. Hall and Gideon Mann. 2010. Distributed Training Strategies for the Structured Perceptron. In HLT-NAACL. 456--464. Ryan T. McDonald Keith B. Hall and Gideon Mann. 2010. Distributed Training Strategies for the Structured Perceptron. In HLT-NAACL. 456--464."},{"key":"e_1_2_1_34_1","unstructured":"Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS. 1273--1282. Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS. 1273--1282."},{"key":"e_1_2_1_35_1","volume-title":"Emiliano De Cristofaro, and Vitaly Shmatikov","author":"Melis Luca","year":"2019","unstructured":"Luca Melis , Congzheng Song , Emiliano De Cristofaro, and Vitaly Shmatikov . 2019 . Exploiting Unintended Feature Leakage in Collaborative Learning. In S &P. 691--706. Luca Melis, Congzheng Song, Emiliano De Cristofaro, and Vitaly Shmatikov. 2019. Exploiting Unintended Feature Leakage in Collaborative Learning. In S&P. 691--706."},{"key":"e_1_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Ilya Mironov. 2017. R\u00e9nyi Differential Privacy. In CSF. 263--275. Ilya Mironov. 2017. R\u00e9nyi Differential Privacy. In CSF. 263--275.","DOI":"10.1109\/CSF.2017.11"},{"key":"e_1_2_1_37_1","volume-title":"R\u00e9nyi Differential Privacy of the Sampled Gaussian Mechanism. CoRR abs\/1908.10530","author":"Mironov Ilya","year":"2019","unstructured":"Ilya Mironov , Kunal Talwar , and Li Zhang . 2019. R\u00e9nyi Differential Privacy of the Sampled Gaussian Mechanism. CoRR abs\/1908.10530 ( 2019 ). Ilya Mironov, Kunal Talwar, and Li Zhang. 2019. R\u00e9nyi Differential Privacy of the Sampled Gaussian Mechanism. CoRR abs\/1908.10530 (2019)."},{"key":"e_1_2_1_38_1","unstructured":"Milad Nasr Reza Shokri and Amir Houmansadr. 2019. Comprehensive Privacy Analysis of Deep Learning: Stand-alone and Federated Learning under Passive and Active White-box Inference Attacks. In S&P. 739--753. Milad Nasr Reza Shokri and Amir Houmansadr. 2019. Comprehensive Privacy Analysis of Deep Learning: Stand-alone and Federated Learning under Passive and Active White-box Inference Attacks. In S&P. 739--753."},{"key":"e_1_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Pascal Paillier. 1999. Public-Key Cryptosystems Based on Composite Degree Residuosity Classes. In EUROCRYPT. 223--238. Pascal Paillier. 1999. Public-Key Cryptosystems Based on Composite Degree Residuosity Classes. In EUROCRYPT. 223--238.","DOI":"10.1007\/3-540-48910-X_16"},{"key":"e_1_2_1_40_1","volume-title":"Hyperparameter Tuning with Renyi Differential Privacy. CoRR abs\/2110.03620","author":"Papernot Nicolas","year":"2021","unstructured":"Nicolas Papernot and Thomas Steinke . 2021. Hyperparameter Tuning with Renyi Differential Privacy. CoRR abs\/2110.03620 ( 2021 ). Nicolas Papernot and Thomas Steinke. 2021. Hyperparameter Tuning with Renyi Differential Privacy. CoRR abs\/2110.03620 (2021)."},{"key":"e_1_2_1_41_1","doi-asserted-by":"crossref","unstructured":"Apostolos Pyrgelis Carmela Troncoso and Emiliano De Cristofaro. 2018. Knock Knock Who's There? Membership Inference on Aggregate Location Data. In NDSS. Apostolos Pyrgelis Carmela Troncoso and Emiliano De Cristofaro. 2018. Knock Knock Who's There? Membership Inference on Aggregate Location Data. In NDSS.","DOI":"10.14722\/ndss.2018.23183"},{"key":"e_1_2_1_42_1","doi-asserted-by":"crossref","unstructured":"Reza Shokri Marco Stronati Congzheng Song and Vitaly Shmatikov. 2017. Membership inference attacks against machine learning models. In S&P. 3--18. Reza Shokri Marco Stronati Congzheng Song and Vitaly Shmatikov. 2017. Membership inference attacks against machine learning models. In S&P. 3--18.","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_2_1_43_1","doi-asserted-by":"crossref","unstructured":"Congzheng Song Thomas Ristenpart and Vitaly Shmatikov. 2017. Machine Learning Models That Remember Too Much. In CCS. 587--601. Congzheng Song Thomas Ristenpart and Vitaly Shmatikov. 2017. Machine Learning Models That Remember Too Much. In CCS. 587--601.","DOI":"10.1145\/3133956.3134077"},{"key":"e_1_2_1_44_1","doi-asserted-by":"crossref","unstructured":"Congzheng Song and Vitaly Shmatikov. 2019. Auditing Data Provenance in Text-Generation Models. In KDD. 196--206. Congzheng Song and Vitaly Shmatikov. 2019. Auditing Data Provenance in Text-Generation Models. In KDD. 196--206.","DOI":"10.1145\/3292500.3330885"},{"key":"e_1_2_1_45_1","unstructured":"Congzheng Song and Vitaly Shmatikov. 2020. Overlearning Reveals Sensitive Attributes. In ICLR. Congzheng Song and Vitaly Shmatikov. 2020. Overlearning Reveals Sensitive Attributes. In ICLR."},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00287-019-01205-x"},{"key":"e_1_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Filipp Valovich and Francesco Ald\u00e0. 2017. Computational Differential Privacy from Lattice-Based Cryptography. In NuTMiC. 121--141. Filipp Valovich and Francesco Ald\u00e0. 2017. Computational Differential Privacy from Lattice-Based Cryptography. In NuTMiC. 121--141.","DOI":"10.1007\/978-3-319-76620-1_8"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2014.2320500"},{"key":"e_1_2_1_49_1","volume-title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. CoRR abs\/1708.07747","author":"Xiao Han","year":"2017","unstructured":"Han Xiao , Kashif Rasul , and Roland Vollgraf . 2017. Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. CoRR abs\/1708.07747 ( 2017 ). Han Xiao, Kashif Rasul, and Roland Vollgraf. 2017. Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. CoRR abs\/1708.07747 (2017)."},{"key":"e_1_2_1_50_1","unstructured":"Andrew Chi-Chih Yao. 1986. How to Generate and Exchange Secrets (Extended Abstract). In FOCS. 162--167. Andrew Chi-Chih Yao. 1986. How to Generate and Exchange Secrets (Extended Abstract). In FOCS. 162--167."},{"key":"e_1_2_1_51_1","doi-asserted-by":"crossref","unstructured":"Samuel Yeom Irene Giacomelli Matt Fredrikson and Somesh Jha. 2018. Privacy risk in machine learning: Analyzing the connection to overfitting. In CSF. 268--282. Samuel Yeom Irene Giacomelli Matt Fredrikson and Somesh Jha. 2018. Privacy risk in machine learning: Analyzing the connection to overfitting. In CSF. 268--282.","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3446776"},{"key":"e_1_2_1_53_1","unstructured":"Yuqing Zhu and Yu-Xiang Wang. 2019. Poission Subsampled R\u00e9nyi Differential Privacy. In ICML. 7634--7642. Yuqing Zhu and Yu-Xiang Wang. 2019. Poission Subsampled R\u00e9nyi Differential Privacy. In ICML. 7634--7642."}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3551793.3551798","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,4]],"date-time":"2024-10-04T23:42:35Z","timestamp":1728085355000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3551793.3551798"}},"subtitle":["a novel approach to federated learning with differential privacy"],"short-title":[],"issued":{"date-parts":[[2022,7]]},"references-count":53,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2022,7]]}},"alternative-id":["10.14778\/3551793.3551798"],"URL":"https:\/\/doi.org\/10.14778\/3551793.3551798","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2022,7]]}}}