{"id":"https://openalex.org/W4406458044","doi":"https://doi.org/10.1109/bigdata62323.2024.10825354","title":"Calibrating Practical Privacy Risks for Differentially Private Machine Learning","display_name":"Calibrating Practical Privacy Risks for Differentially Private Machine Learning","publication_year":2024,"publication_date":"2024-12-15","ids":{"openalex":"https://openalex.org/W4406458044","doi":"https://doi.org/10.1109/bigdata62323.2024.10825354"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata62323.2024.10825354","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata62323.2024.10825354","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Big Data (BigData)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://mdsoar.org/bitstreams/004648b0-614e-4444-ae55-5803bb9bf2e0/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009417833","display_name":"Yuechun Gu","orcid":null},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yuechun Gu","raw_affiliation_strings":["University of Maryland, Baltimore County,Trustworthy and Intelligent Computing Lab, Computer Science and Electrical Engineering, Cybersecurity Institute,Baltimore,USA"],"affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County,Trustworthy and Intelligent Computing Lab, Computer Science and Electrical Engineering, Cybersecurity Institute,Baltimore,USA","institution_ids":["https://openalex.org/I79272384"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002572745","display_name":"Keke Chen","orcid":"https://orcid.org/0000-0002-9996-156X"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Keke Chen","raw_affiliation_strings":["University of Maryland, Baltimore County,Trustworthy and Intelligent Computing Lab, Computer Science and Electrical Engineering, Cybersecurity Institute,Baltimore,USA"],"affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County,Trustworthy and Intelligent Computing Lab, Computer Science and Electrical Engineering, Cybersecurity Institute,Baltimore,USA","institution_ids":["https://openalex.org/I79272384"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5009417833"],"corresponding_institution_ids":["https://openalex.org/I79272384"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23829009,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1526","last_page":"1535"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7294151186943054},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5678661465644836},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4637359380722046},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4236277937889099},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.4202728867530823},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3223245143890381},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.20234832167625427}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7294151186943054},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5678661465644836},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4637359380722046},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4236277937889099},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.4202728867530823},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3223245143890381},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.20234832167625427}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/bigdata62323.2024.10825354","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata62323.2024.10825354","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Big Data (BigData)","raw_type":"proceedings-article"},{"id":"pmh:oai:mdsoar.org:11603/37025","is_oa":true,"landing_page_url":"http://hdl.handle.net/11603/37025","pdf_url":"https://mdsoar.org/bitstreams/004648b0-614e-4444-ae55-5803bb9bf2e0/download","source":{"id":"https://openalex.org/S4306402556","display_name":"Maryland Shared Open Access Repository (USMAI Consortium)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"doi:10.13016/m2flfq-pbos","is_oa":true,"landing_page_url":"https://doi.org/10.13016/m2flfq-pbos","pdf_url":null,"source":{"id":"https://openalex.org/S4306402644","display_name":"Digital Repository at the University of Maryland (University of Maryland College Park)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66946132","host_organization_name":"University of Maryland, College Park","host_organization_lineage":["https://openalex.org/I66946132"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:mdsoar.org:11603/37025","is_oa":true,"landing_page_url":"http://hdl.handle.net/11603/37025","pdf_url":"https://mdsoar.org/bitstreams/004648b0-614e-4444-ae55-5803bb9bf2e0/download","source":{"id":"https://openalex.org/S4306402556","display_name":"Maryland Shared Open Access Repository (USMAI Consortium)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4406458044.pdf"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W2027595342","https://openalex.org/W2051267297","https://openalex.org/W2109426455","https://openalex.org/W2113792377","https://openalex.org/W2142406320","https://openalex.org/W2150283722","https://openalex.org/W2282821441","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2612690371","https://openalex.org/W2801995427","https://openalex.org/W2897830718","https://openalex.org/W2911978475","https://openalex.org/W2969945192","https://openalex.org/W3016000170","https://openalex.org/W3035616549","https://openalex.org/W3138815606","https://openalex.org/W3183976747","https://openalex.org/W3189322178","https://openalex.org/W4213044365","https://openalex.org/W4283266241","https://openalex.org/W4283364113","https://openalex.org/W4287691174","https://openalex.org/W4287816349","https://openalex.org/W4288057780","https://openalex.org/W4328007749","https://openalex.org/W4382318179","https://openalex.org/W4385679781","https://openalex.org/W4390305899","https://openalex.org/W4390874779","https://openalex.org/W6737947904","https://openalex.org/W6781511523","https://openalex.org/W6784633776","https://openalex.org/W6839352123"],"related_works":["https://openalex.org/W4391095118","https://openalex.org/W2584827882","https://openalex.org/W3195097297","https://openalex.org/W4225340788","https://openalex.org/W3038106605","https://openalex.org/W2513267613","https://openalex.org/W3049084372","https://openalex.org/W2528109871","https://openalex.org/W2940702331","https://openalex.org/W2905822832"],"abstract_inverted_index":{"Differential":[0],"privacy":[1,3,6,65,71,113,145,172,197],"quantifies":[2],"through":[4],"the":[5,35,39,75,79,98,104,136,164,170],"budget":[7,114],",":[8],"yet":[9],"its":[10],"practical":[11,70,196],"interpretation":[12],"is":[13,123],"complicated":[14],"by":[15,68,102],"variations":[16],"across":[17],"models":[18],"and":[19,28,54,81,91,147,150,169,199],"datasets.":[20],"Recent":[21],"research":[22],"on":[23],"differentially":[24],"private":[25],"machine":[26],"learning":[27],"membership":[29,41],"inference":[30,42],"has":[31],"highlighted":[32],"that":[33,86],"with":[34,194],"same":[36],"theoretical":[37],"setting,":[38],"likelihood-ratio-based":[40],"(LiRA)":[43],"attack":[44,99],"success":[45,100],"rate":[46,101],"(ASR)":[47],"may":[48,110],"vary":[49],"according":[50],"to":[51,142,161,186],"specific":[52,89,93,178],"datasets":[53],"models,":[55],"which":[56],"might":[57],"be":[58],"a":[59,88,92,107,177],"better":[60],"indicator":[61],"for":[62,87],"evaluating":[63],"real-world":[64],"risks.":[66],"Inspired":[67],"this":[69],"measure,":[72],"we":[73,95,109,188],"study":[74],"positive":[76],"correlation":[77],"between":[78,167],"setting":[80],"ASR.":[82],"We":[83,134,156],"also":[84],"find":[85],"dataset":[90,120],"task":[94],"can":[96,189],"lower":[97],"modifying":[103],"dataset.":[105],"As":[106],"result,":[108],"enable":[111],"flexible":[112],"settings":[115],"in":[116,174],"model":[117,140],"training.":[118],"One":[119],"modification":[121],"strategy":[122],"selectively":[124],"suppressing":[125],"privacy-sensitive":[126],"features":[127,185],"without":[128],"significantly":[129],"damaging":[130],"application-specific":[131],"data":[132,192],"utility.":[133],"use":[135],"SHAP":[137],"(or":[138],"LIME)":[139],"explainer":[141],"evaluate":[143],"features\u2019":[144],"sensitivity":[146],"utility":[148,193],"importance":[149],"develop":[151],"an":[152],"optimized":[153],"feature-masking":[154],"algorithm.":[155],"have":[157],"conducted":[158],"extensive":[159],"experiments":[160],"show":[162],"(1)":[163],"inherent":[165],"link":[166],"ASR":[168],"dataset\u2019s":[171],"risk":[173],"terms":[175],"of":[176],"modeling":[179],"task;":[180],"(2)":[181],"By":[182],"carefully":[183],"selecting":[184],"mask,":[187],"preserve":[190],"more":[191],"equivalent":[195],"protection":[198],"relaxed":[200],"settings.":[201],"The":[202],"implementation":[203],"details":[204],"are":[205],"shared":[206],"online":[207],"at":[208],"https://github.com/RhincodonE/On-sensitive-features-and-empirical-epsilon-lower-bounds.":[209]},"counts_by_year":[],"updated_date":"2026-03-11T14:59:36.786465","created_date":"2025-10-10T00:00:00"}