MammothDP hardens private boosted trees for trusted hardware
It adds privacy-free early stopping and rollback protection intended to resist timing side channels on TEEs.
83 stories, newest first · one card per story
It adds privacy-free early stopping and rollback protection intended to resist timing side channels on TEEs.
The authors report better reconstruction than chosen baselines, including when batch size is moderately overestimated.
Holding curvature, schedule and privacy calibration fixed, changing only momentum can reverse mechanism rankings.
Fit-Then-Protect yields smaller mean squared error than Protect-Then-Fit under Gaussian differential privacy in functional mean estimation
RelGuard is the first differentially private framework for GraphRAG providing formal privacy guarantees.
Ext-Classify-Priv framework classifies attributes by audience to preserve only contextually sensitive information in differentially private synthetic data releases.
CoRTeC releases synthetic data under differential privacy using noisy counts, decodable without language models or real records.
A two-round interactive algorithm for subgraph counting under local edge differential privacy improves additive error by a factor of sqrt n compared to noninteractive approaches.
Interactive communication protocol allows two parties to privately test whether their datasets are compatible for joint training under epsilon-differential privacy using Theta(log log m over epsilon) samples for…
Moving up the information hierarchy yields unbounded utility advantages for privacy filters and arbitrary precision improvements for odometers.
Every ρ-zCDP mechanism satisfies μ_zCDP(ρ)-GDP with sharp bounds √(πρ) ≤ μ_zCDP(ρ) ≤ √(8ρ).
Mechanism uses dummy points to privatize batch sizes in DP-SGD while preserving privacy under truncation and subsampling.
Multiscale FFT reduces runtime from quadratic to O(α^{-1} log(1/α)) and rounding errors to O(α^2/log(t)) for DP-SGD with PREAMBLE.
SPLICE returns a private distribution with Sliced Wasserstein-1 distance tilde O(1/sqrt(n)) from the target, independent of data dimension d.
PFR privately filters outliers so noise can scale to typical sensitivity, covering statistics, subspaces, graphs and treatment rules.
PB-AMD uses adjoint gradients and entropic updates so noise schedules stay positive and spend the certified zCDP budget.
A proposed Sparse Vector Technique primitive reaches central-model error with O(d log-star d) expected queries.
The attacks remain effective when released statistics are highly noisy, for Gaussians and binary products.
Normal-versus-sick ROC-AUC was 0.940-0.990, but year alone scored 0.974 on the same partition.
The method picks a clipping bound by balancing residual coherence against the extra noise variance.
At epsilon 0.5, PRISMA beats tabular DP baselines by keeping diverse power profiles instead of collapsing to few modes.
The method pairs a rectified curvature estimator with anisotropic noise and reports better utility than prior clipping methods.
Polynomial-time pure and approximate DP algorithms match known sample rates up to logarithmic factors for batched user data.
New toolkit falsifies claimed privacy guarantees in Node-DP mechanism.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views