activity
20222026
most citedDPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling

18 citations · 20 across the 8 of their papers we have counts for

collaborators

10 papers

cs.CR2026

BetweenCut: Private Heavy-Node Classification with Doubly Logarithmic Error in Tree Height

Ergute Bao, Graham Cormode, Xiaokui Xiao +1

Finding heavy nodes in a tree---those whose counts exceed a given threshold---is a building block for analysis and learning over structured data. Achieving record-level differentia…

cs.CR2026

Distributed and Private Textual Data Synthesis from Embeddings

Ergute Bao, Hongyan Chang, Ali Shahin Shamsabadi +2

We revisit differentially private (DP) text synthesis in the realistic setting of distributed users, where privacy concerns preclude a trusted curator with access to raw user texts…

cs.CR2026

Private Direct Preference Optimization for LLM Alignment

Yangfan Jiang, Fei Wei, Ergute Bao +3

Direct preference optimization (DPO) is now a standard method for aligning large language models (LLMs) using human preference data. Each DPO example contains a prompt and a pair o…

cs.CR2026

Auditing Apple's DifferentialPrivacy.framework: Implementation Bugs, Misconfigurations, and Practical Risks

Rishav Chourasia, Ergute Bao, Uzair Javaid +1

Since 2016, Apple has claimed that device analytics collected to improve user experience are protected by differential privacy (DP). Apple's DifferentialPrivacy framework is deploy…

cs.CR2026

Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems

Hongyan Chang, Ergute Bao, Xinjian Luo +1

Large language models (LLMs) increasingly rely on retrieving information from external corpora. This creates a new attack surface: indirect prompt injection (IPI), where hidden ins…

cs.DB2026

Accurate Table Question Answering with Accessible LLMs

Yangfan Jiang, Fei Wei, Ergute Bao +4

Given a table T in a database and a question Q in natural language, the table question answering (TQA) task aims to return an accurate answer to Q based on the content of T. Recent…

cs.CR2024

GCON: Differentially Private Graph Convolutional Network via Objective Perturbation

Jianxin Wei, Yizheng Zhu, Xiaokui Xiao +4

Graph Convolutional Networks (GCNs) are a popular machine learning model with a wide range of applications in graph analytics, including healthcare, transportation, and finance. Ho…

cs.CR2024

AAA: an Adaptive Mechanism for Locally Differential Private Mean Estimation

Fei Wei, Ergute Bao, Xiaokui Xiao +2

Local differential privacy (LDP) is a strong privacy standard that has been adopted by popular software systems. The main idea is that each individual perturbs their own data local…

cs.LG2022★ 2 cited

Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy

Ergute Bao, Yizheng Zhu, Xiaokui Xiao +4

Deep neural networks have strong capabilities of memorizing the underlying training data, which can be a serious privacy concern. An effective solution to this problem is to train…

cs.CR2022★ 18 cited

DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling

Jianxin Wei, Ergute Bao, Xiaokui Xiao +1

Nowadays, differential privacy (DP) has become a well-accepted standard for privacy protection, and deep neural networks (DNN) have been immensely successful in machine learning. T…