{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T11:30:11Z","timestamp":1784374211407,"version":"3.55.0"},"reference-count":34,"publisher":"Association for Computing Machinery (ACM)","issue":"12","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2025,8]]},"abstract":"<jats:p>Synthetic data is often positioned as a solution to replace sensitive fixed-size data sets with a source of unlimited matching data, freed from privacy concerns. There has been much progress in synthetic data generation over the last decade, leveraging corresponding advances in machine learning and data analytics. In this tutorial, we survey the key developments and the main concepts in tabular synthetic data generation, including paradigms based on probabilistic graphical models and on deep learning. We provide background and motivation, before giving a technical deep-dive into the methodologies. We also address the limitations of synthetic data, by studying attacks that seek to retrieve information about the original sensitive data. Finally, we present extensions and open problems in this area.<\/jats:p>","DOI":"10.14778\/3750601.3750692","type":"journal-article","created":{"date-parts":[[2025,9,16]],"date-time":"2025-09-16T13:38:05Z","timestamp":1758029885000},"page":"5448-5450","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Synthetic Tabular Data: Methods, Attacks and Defenses"],"prefix":"10.14778","volume":"18","author":[{"given":"Graham","family":"Cormode","sequence":"first","affiliation":[{"name":"Meta and University of Warwick, Coventry, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shripad","family":"Gade","sequence":"additional","affiliation":[{"name":"Meta, Menlo Park, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Samuel","family":"Maddock","sequence":"additional","affiliation":[{"name":"Meta and University of Warwick, Coventry, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Enayat","family":"Ullah","sequence":"additional","affiliation":[{"name":"Meta, Menlo Park, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,9,16]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_2_1_2_1","first-page":"4871","volume-title":"USENIX Security","author":"Annamalai M. S. M. S.","year":"2024","unstructured":"M. S. M. S. Annamalai, G. Ganev, and E. De Cristofaro. \"what do you want from theory alone?\" experimenting with tight auditing of differentially private synthetic data generation. In USENIX Security, pages 4855\u20134871, 2024."},{"key":"e_1_2_1_3_1","volume-title":"Language models are realistic tabular data generators. arXiv:2210.06280","author":"Borisov V.","year":"2022","unstructured":"V. Borisov, K. Se\u00dfler, T. Leemann, M. Pawelczyk, and G. Kasneci. Language models are realistic tabular data generators. arXiv:2210.06280, 2022."},{"key":"e_1_2_1_4_1","volume-title":"SMOTE: synthetic minority over-sampling technique. CoRR, abs\/1106.1813","author":"Bowyer K. W.","year":"2011","unstructured":"K. W. Bowyer, N. V. Chawla, L. O. Hall, and W. P. Kegelmeyer. SMOTE: synthetic minority over-sampling technique. CoRR, abs\/1106.1813, 2011."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.14778\/3476249.3476272"},{"issue":"2","key":"e_1_2_1_6_1","first-page":"1","article-title":"Privlava: Synthesizing relational data with foreign keys under differential privacy","volume":"1","author":"Cai K.","year":"2023","unstructured":"K. Cai, X. Xiao, and G. Cormode. Privlava: Synthesizing relational data with foreign keys under differential privacy. ACM SIGMOD, 1(2):142:1\u2013142:25, 2023.","journal-title":"ACM SIGMOD"},{"key":"e_1_2_1_7_1","volume-title":"Synthetic tabular data: Methods, attacks and defenses. CoRR, abs\/2506.06108","author":"Cormode G.","year":"2025","unstructured":"G. Cormode, S. Maddock, E. Ullah, and S. Gade. Synthetic tabular data: Methods, attacks and defenses. CoRR, abs\/2506.06108, 2025."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1561\/0400000042"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-09342-5_17"},{"key":"e_1_2_1_10_1","volume-title":"AISTATS","author":"Fuentes M.","year":"2024","unstructured":"M. Fuentes, B. C. Mullins, R. McKenna, G. Miklau, and D. Sheldon. Adaptively incorporating public information for private synthetic data. In AISTATS, 2024."},{"key":"e_1_2_1_11_1","volume-title":"Privacy Vulnerabilities in Marginals-based Synthetic Data","author":"Golob S.","year":"2024","unstructured":"S. Golob. Privacy Vulnerabilities in Marginals-based Synthetic Data. University of Washington, 2024."},{"key":"e_1_2_1_12_1","volume-title":"NeurIPS","author":"Goodfellow I. J.","year":"2014","unstructured":"I. J. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. C. Courville, and Y. Bengio. Generative adversarial nets. In NeurIPS, 2014."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/FOCS.2010.85"},{"key":"e_1_2_1_14_1","volume-title":"De Cristofaro. Logan: Membership inference attacks against generative models. arXiv:1705.07663","author":"Hayes J.","year":"2017","unstructured":"J. Hayes, L. Melis, G. Danezis, and E. De Cristofaro. Logan: Membership inference attacks against generative models. arXiv:1705.07663, 2017."},{"key":"e_1_2_1_15_1","volume-title":"PETS","author":"Hilprecht B.","year":"2019","unstructured":"B. Hilprecht, M. H\u00e4rterich, and D. Bernau. Monte carlo and reconstruction membership inference attacks against generative models. PETS, 2019."},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1795555"},{"key":"e_1_2_1_17_1","volume-title":"ICML","author":"Kotelnikov A.","year":"2023","unstructured":"A. Kotelnikov, D. Baranchuk, I. Rubachev, and A. Babenko. Tabddpm: Modelling tabular data with diffusion models. In ICML, 2023."},{"key":"e_1_2_1_18_1","volume-title":"ICML","author":"Liu T.","year":"2023","unstructured":"T. Liu, J. Tang, G. Vietri, and S. Wu. Generating private synthetic data with genetic algorithms. In ICML, 2023."},{"key":"e_1_2_1_19_1","volume-title":"ICML. PMLR","author":"Liu T.","year":"2021","unstructured":"T. Liu, G. Vietri, T. Steinke, J. Ullman, and S. Wu. Leveraging public data for practical private query release. In ICML. PMLR, 2021."},{"key":"e_1_2_1_20_1","volume-title":"NeurIPS","author":"Liu T.","year":"2021","unstructured":"T. Liu, G. Vietri, and S. Wu. Iterative methods for private synthetic data: Unifying framework and new methods. In NeurIPS, 2021."},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671990"},{"key":"e_1_2_1_22_1","volume-title":"Leveraging vertical public-private split for improved synthetic data generation. arXiv, 2504.10987","author":"Maddock S.","year":"2025","unstructured":"S. Maddock, S. Gade, G. Cormode, and W. Bullock. Leveraging vertical public-private split for improved synthetic data generation. arXiv, 2504.10987, 2025."},{"issue":"3","key":"e_1_2_1_23_1","article-title":"Winning the NIST contest: A scalable and general approach to differentially private synthetic data","volume":"11","author":"McKenna R.","year":"2021","unstructured":"R. McKenna, G. Miklau, and D. Sheldon. Winning the NIST contest: A scalable and general approach to differentially private synthetic data. J. Priv. Confidentiality, 11(3), 2021.","journal-title":"J. Priv. Confidentiality"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.14778\/3551793.3551817"},{"key":"e_1_2_1_25_1","volume-title":"De Cock. Caps: Collaborative and private synthetic data generation from distributed sources. arXiv:2402.08614","author":"Pentyala S.","year":"2024","unstructured":"S. Pentyala, M. Pereira, and M. De Cock. Caps: Collaborative and private synthetic data generation from distributed sources. arXiv:2402.08614, 2024."},{"key":"e_1_2_1_26_1","volume-title":"d. Sousa Jr, and M. De Cock. Secure multiparty computation for synthetic data generation from distributed data. arXiv:2210.07332","author":"Pereira M.","year":"2022","unstructured":"M. Pereira, S. Pentyala, A. Nascimento, R. T. d. Sousa Jr, and M. De Cock. Secure multiparty computation for synthetic data generation from distributed data. arXiv:2210.07332, 2022."},{"key":"e_1_2_1_27_1","volume-title":"Privately generating tabular data using language models. arXiv:2306.04803","author":"Sablayrolles A.","year":"2023","unstructured":"A. Sablayrolles, Y. Wang, and B. Karrer. Privately generating tabular data using language models. arXiv:2306.04803, 2023."},{"key":"e_1_2_1_28_1","volume-title":"Membership inference attacks against synthetic data through overfitting detection. arXiv:2302.12580","author":"Breugel B. Van","year":"2023","unstructured":"B. Van Breugel, H. Sun, Z. Qian, and M. van der Schaar. Membership inference attacks against synthetic data through overfitting detection. arXiv:2302.12580, 2023."},{"key":"e_1_2_1_29_1","volume-title":"NeurIPS","author":"Vietri G.","year":"2022","unstructured":"G. Vietri, C. Archambeau, S. Ayd\u00f6re, W. Brown, M. Kearns, A. Roth, A. A. Siva, S. Tang, and Z. S. Wu. Private synthetic data for multitask learning and marginal queries. In NeurIPS, 2022."},{"key":"e_1_2_1_30_1","volume-title":"Encyclopedia of Machine Learning and Data Mining","author":"Webb G. I.","year":"2017","unstructured":"G. I. Webb. Na\u00efve bayes. In C. Sammut and G. I. Webb, editors, Encyclopedia of Machine Learning and Data Mining. Springer, 2017."},{"key":"e_1_2_1_31_1","first-page":"7343","volume-title":"NeurIPS","author":"Xu L.","year":"2019","unstructured":"L. Xu, M. Skoularidou, A. Cuesta-Infante, and K. Veeramachaneni. Modeling tabular data using conditional GAN. In NeurIPS, pages 7333\u20137343, 2019."},{"key":"e_1_2_1_32_1","volume-title":"Mixed-type tabular data synthesis with score-based diffusion in latent space. arXiv:2310.09656","author":"Zhang H.","year":"2023","unstructured":"H. Zhang, J. Zhang, B. Srinivasan, Z. Shen, X. Qin, C. Faloutsos, H. Rangwala, and G. Karypis. Mixed-type tabular data synthesis with score-based diffusion in latent space. arXiv:2310.09656, 2023."},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134428"},{"key":"e_1_2_1_34_1","volume-title":"USENIX Security","author":"Zhang Z.","year":"2021","unstructured":"Z. Zhang, T. Wang, N. Li, J. Honorio, M. Backes, S. He, J. Chen, and Y. Zhang. Privsyn: Differentially private data synthesis. In USENIX Security, 2021."}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3750601.3750692","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,16]],"date-time":"2025-09-16T13:39:23Z","timestamp":1758029963000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3750601.3750692"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8]]},"references-count":34,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2025,8]]}},"alternative-id":["10.14778\/3750601.3750692"],"URL":"https:\/\/doi.org\/10.14778\/3750601.3750692","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2025,8]]},"assertion":[{"value":"2025-09-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}