311 citations · 601 across the 23 of their papers we have counts for
5 papers · 1 filter
Membership Inference Attacks From First Principles
Nicholas Carlini, Steve Chien, Milad Nasr +3
A membership inference attack allows an adversary to query a trained machine learning model to predict whether or not a particular example was contained in the model's training dat…
Public Data-Assisted Mirror Descent for Private Model Training
Ehsan Amid, Arun Ganesh, Rajiv Mathews +6
In this paper, we revisit the problem of using in-distribution public data to improve the privacy/utility trade-offs for differentially private (DP) model training. (Here, public d…
Private Alternating Least Squares: Practical Private Matrix Completion with Tighter Rates
Steve Chien, Prateek Jain, Walid Krichene +4
We study the problem of differentially private (DP) matrix completion under user-level privacy. We design a joint differentially private variant of the popular Alternating-Least-Sq…
Practical and Private (Deep) Learning without Sampling or Shuffling
Peter Kairouz, Brendan McMahan, Shuang Song +3
We consider training models with differential privacy (DP) using mini-batch gradients. The existing state-of-the-art, Differentially Private Stochastic Gradient Descent (DP-SGD), r…
Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning
Milad Nasr, Shuang Song, Abhradeep Thakurta +2
Differentially private (DP) machine learning allows us to train models on private data while limiting data leakage. DP formalizes this data leakage through a cryptographic game, wh…