The DOI matches its DataCite record; 21 of the 22 references it cites were found in a registry or an index.
Subsampled Rényi Differential Privacy and Analytical Moments Accountant
Open accessAbstract
We study the problem of subsampling in differential privacy (DP), a question that is the centerpiece behind many successful differentially private machine learning algorithms. Specifically, we provide a tight upper bound on the Rényi Differential Privacy (RDP) (Mironov, 2017) parameters for algorithms that: (1) subsample the dataset, and then (2) applies a randomized mechanism M to the subsample, in terms of the RDP parameters of M and the subsampling probability parameter. Our results generalize the moments accounting technique, developed by Abadi et al. (2016) for the Gaussian mechanism, to any subsampled RDP mechanism.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Even if the data on a client is not intentionally malicious, it may have noisy features [350] (eg. in vision applications, a client may have a low-resolution camera whose output is scaled to a higher resolution) or noisy labels [356] (eg. if the user indicates that a recommendation by an app is not relevant accidentally).”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [350]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Calibrating Noise to Sensitivity in Private Data Analysis
Dwork, C., McSherry, F., Nissim, K., & Smith, A. (2006) · Lecture Notes in Computer Science · doi:10.1007/11681878_14 · Cited by 7,272
Deep Learning with Differential Privacy
Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., & Zhang, L. (2016) · Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2976749.2978318 · Cited by 6,578
The Algorithmic Foundations of Differential Privacy
Dwork, C., & Roth, A. (2014) · Foundations and Trends® in Theoretical Computer Science · doi:10.1561/0400000042 · Cited by 5,557
RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response
Erlingsson, Ú., Pihur, V., & Korolova, A. (2014) · Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2660267.2660348 · Cited by 1,838
Our Data, Ourselves: Privacy Via Distributed Noise Generation
Dwork, C., Kenthapadi, K., McSherry, F., Mironov, I., & Naor, M. (2006) · Lecture Notes in Computer Science · doi:10.1007/11761679_29 · Cited by 1,835
Rényi Divergence and Kullback-Leibler Divergence
van Erven, T., & Harremoës, P. (2014) · IEEE Transactions on Information Theory · doi:10.1109/tit.2014.2320500 · Cited by 1,688
Kasiviswanathan, S. P., Lee, H. K., Nissim, K., Raskhodnikova, S., & Smith, A. (2011) · SIAM Journal on Computing · doi:10.1137/090756090 · Cited by 898
Self-citationConcentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds
Bun, M., & Steinke, T. (2016) · Lecture notes in computer science · doi:10.1007/978-3-662-53641-4_24 · Cited by 703
Stochastic gradient descent with differentially private updates
Song, S., Chaudhuri, K., & Sarwate, A. D. (2013) · IEEE Global Conference on Signal and Information Processing · doi:10.1109/globalsip.2013.6736861 · Cited by 562
Concentrated Differential PrivacyPreprint
Dwork, C., & Rothblum, G. N. (2016) · arXiv (Cornell University) · doi:10.4230/lipics.forc.2026.4 · Cited by 528
Research works printed but not linked: 11
- Apple, D. (2017). Learning with privacy at scale. Apple Machine Learning Journal .
- Balle, B., & Wang, Y.-X. (2018). Improving gaussian mechanism for differential privacy: Analytical calibration and optimal denoising. International Conference in Machine Learning (ICML) .
- Bassily, R., Smith, A., & Thakurta, A. (2014). Private empirical risk minimization: Efficient algorithms and tight error bounds. In Foundations of Computer Science (FOCS-14) , (pp. 464-473). IEEE.
- Dwork, C., Rothblum, G. N., & Vadhan, S. (2010). Boosting and differential privacy. In Foundations of Computer Science (FOCS), 2010 51st Annual IEEE Symposium on , (pp. 51-60). IEEE.
- European Parliament, & Council of the European Union (2016). Regulation (eu) 2016/679 of the european parliament and of the council of 27 april 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95/46/ec (general data protection regulation). Official Journal of the European Union .
- Mironov, I. (2017). Rényi differential privacy. In Computer Security Foundations Symposium (CSF), 2017 IEEE 30th , (pp. 263-275). IEEE.
- Murtagh, J., & Vadhan, S. (2016). The complexity of computing the optimal composition of differential privacy. In Theory of Cryptography Conference , (pp. 157-175). Springer.
- Vajda, I. (1973). χ α -divergence and generalized fisher information. In Prague Conference on Information Theory, Statistical Decision Functions and Random Processes , (p. 223). Academia.
- Wang, Y.-X. (2018). Per-instance differential privacy. Journal of Confidentiality and Privacy, to appear .
- Wang, Y.-X., Fienberg, S., & Smola, A. (2015). Privacy for free: Posterior sampling and stochastic gradient monte carlo. In International Conference on Machine Learning (ICML-15) , (pp. 2493-2502).
- Wang, Y.-X., Lei, J., & Fienberg, S. E. (2016). Learning with differential privacy: Stability, learnability and the sufficiency and necessity of erm principle. Journal of Machine Learning Research , 17 (183), 1-40.
Cited by
Sorted by citations
Items 201–222 of 222
PULSE-LDP: Pattern-Aware Unified Local Sampling for Efficient Local Differential Privacy
Tao, T., Cheng, S., Mo, L., & Wang, X. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3682480
Towards Practical Differential Privacy for Diffusion-Based Dataset Distillation
Yao, P., Qian, Y., & Hao, Y. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11460317
Mehmood, H., Xu, J., Saravanan, K., van Dalen, R., & Özay, M. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11460789
Analyzing Privacy–Utility Trade-Offs in Differentially Private Federated Learning on EMNIST
Raha, M. R. R., Tasnim, T., & Hashem, M. M. A. (2025) · International Conference on Computer and Information Technology (ICCIT) · doi:10.1109/iccit68739.2025.11491457
Optimizing Differential Privacy: The Role of Model Parallelism and Iteration Subsampling
Yadav, K., & Dixit, K. K. (2025) · Asian Conference on Communication and Networks (ASIANComNet) · doi:10.1109/asiancomnet68615.2025.11579615
Differentially Private GAN With Group-Wise Purification of Local Gradients
Sun, K., Chang, P., Hu, J., Ji, L., & Zhang, J. J. (2026) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2026.3712222
ŞAHİN, F. (2026) · Applied Sciences · doi:10.3390/app16168278
DPFNAS: Differential Privacy-Enhanced Federated Neural Architecture Search for 6G Edge Intelligence
Lyu, Y., Cao, J. P., Niu, B., Sun, Z., Wang, F., Li, F., & Li, H. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3726505
Zuo, X., Zhong, D., Liu, Y., Tang, F., & Zhou, Y. (2026) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2026.3727202
LAP 2 : Revisiting Laplace DP-SGD for High Dimensions via Majorization Theory
Mohammady, M., Yang, Q., Stout, N., Samreen, A., Wang, H., Quinn, C. J., & Hong, Y. (2026) · IEEE Computer Security Foundations Workshop (CSFW) · doi:10.1109/csf68417.2026.00013
Privacy-Preserving and Fair Training for Federated GNN
Chen, J., Zhang, H., Liu, X., & Yi, X. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050151
Wang, S., & Wang, B. (2026) · Sensors · doi:10.3390/s26175654
FiLA-DP: Fisher-Guided Layer Sharing for Differential Privacy in Federated Learning
Ni, Q., Xie, S., Dong, X., Guo, J., & Wang, T. (2026) · IEEE International Conference on Web Services (ICWS) · doi:10.1109/icws72778.2026.00029
A Novel Differentially Private Low Rank Weight Fusion Approach
Yao, Y., Wang, Y., Huang, C., Ji, W., & He, D. (2026) · Chinese Journal of Electronics · doi:10.23919/cje.2024.00.123
Self-citationZhou, W., Li, R., & Huan, D. (2026) · Cluster Computing · doi:10.1007/s10586-026-06539-2
Privacy-Preserving Federated Learning for Conversational AI: A DP-Adapter Framework
GUDIPATI, S. K., AKKISETTI, S. R., & Mohammed, A. R. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-32729-1_1
Pandey, D., Singla, P., Pal, S., Chanak, P., Singh, M. P., & Pandey, O. J. (2026) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2026.3738968
Xia, Y., Jahani-Nezhad, T., & Bitar, R. (2026) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2026.3744992
Federated Learning for AI-Driven Query Optimization in Multi-Cloud Data Warehouses
Puchhakayala, R., Krishnama, C., Gouri, F., & Kotha, S. (2026) · IEEE Access · doi:10.1109/access.2026.3745738
Yan, W. (2026) · Discover Artificial Intelligence · doi:10.1007/s44163-026-02316-7
The distributed discrete gaussian mechanism for federated learning with secure aggregation
Kairouz, P., Liu, Z., & Steinke, T. (2021) · arXiv · doi:10.48550/arxiv.2102.06387 · Cited by 117
Metadata
- Authors
- Wang, Y.-X., Balle, B., & Kasiviswanathan, S.
- Affiliations
- University of California, Santa Barbara (US)
- Amazon (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2018
- Volume
- 10
- Issue
- 2
- ISSN
- 2575-8527 (ISSN-L)
- arXiv
- 1808.00087
- OpenAlex
- W2887654530
- Cited by
- 224
- References
- 22
- Citations by year
- 2026: 24 · 2025: 30 · 2024: 44 · 2023: 17 · 2022: 13 · 2021: 48 · 2020: 35 · 2019: 12 · 2018: 1
- FWCI
- 11.11
- Type
- journal article
- Language
- en
- Open access
- diamond
- doi.org
- Licence
- cc-by-nc-nd
- arxiv.org/licenses/nonexclusive-distrib/1.0/
- Locations
- Journal of Privacy and Confidentiality (publishedVersion, cc-by-nc-nd)
- arXiv (Cornell University) (submittedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- eScholarship (California Digital Library) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Keywords
- differential privacy, Rényi differential privacy, subsampling, randomized mechanisms, Gaussian mechanism
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
