{"id":"https://openalex.org/W3211025647","doi":"https://doi.org/10.14778/3484224.3484231","title":"Quantifying identifiability to choose and audit \u03f5 in differentially private deep learning","display_name":"Quantifying identifiability to choose and audit \u03f5 in differentially private deep learning","publication_year":2021,"publication_date":"2021-09-01","ids":{"openalex":"https://openalex.org/W3211025647","doi":"https://doi.org/10.14778/3484224.3484231","mag":"3211025647"},"language":"en","primary_location":{"id":"doi:10.14778/3484224.3484231","is_oa":false,"landing_page_url":"https://doi.org/10.14778/3484224.3484231","pdf_url":null,"source":{"id":"https://openalex.org/S4210226185","display_name":"Proceedings of the VLDB Endowment","issn_l":"2150-8097","issn":["2150-8097"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the VLDB Endowment","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033918281","display_name":"Daniel Bernau","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel Bernau","raw_affiliation_strings":["SAP SE, Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP SE, Karlsruhe, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008679520","display_name":"G\u00fcnther Eibl","orcid":"https://orcid.org/0000-0001-9570-5246"},"institutions":[{"id":"https://openalex.org/I4210087982","display_name":"Fachhochschule Salzburg","ror":"https://ror.org/0072dxg89","country_code":"AT","type":"education","lineage":["https://openalex.org/I4210087982"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"G\u00fcnther Eibl","raw_affiliation_strings":["Salzburg University of Applied Sciences, Salzburg, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Salzburg University of Applied Sciences, Salzburg, Austria","institution_ids":["https://openalex.org/I4210087982"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111170442","display_name":"Philip W. Grassal","orcid":null},"institutions":[{"id":"https://openalex.org/I223822909","display_name":"Heidelberg University","ror":"https://ror.org/038t36y30","country_code":"DE","type":"education","lineage":["https://openalex.org/I223822909"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Philip W. Grassal","raw_affiliation_strings":["University of Heidelberg, Heidelberg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Heidelberg, Heidelberg, Germany","institution_ids":["https://openalex.org/I223822909"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031655714","display_name":"Hannah Keller","orcid":"https://orcid.org/0000-0002-4461-7067"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hannah Keller","raw_affiliation_strings":["SAP SE, Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP SE, Karlsruhe, Germany","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102985450","display_name":"Florian Kerschbaum","orcid":"https://orcid.org/0000-0003-4288-2286"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Florian Kerschbaum","raw_affiliation_strings":["University of Waterloo, Waterloo, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, Canada","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6824,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.75971406,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"14","issue":"13","first_page":"3335","last_page":"3347"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9742000102996826,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.9179249405860901},{"id":"https://openalex.org/keywords/identifiability","display_name":"Identifiability","score":0.8923344612121582},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7171554565429688},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6533685922622681},{"id":"https://openalex.org/keywords/bounding-overwatch","display_name":"Bounding overwatch","score":0.4845675528049469},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.469249963760376},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.46721068024635315},{"id":"https://openalex.org/keywords/bayesian-inference","display_name":"Bayesian inference","score":0.4505480229854584},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.4344303607940674},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4273255467414856},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.4101089835166931},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3730104863643646},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3428080677986145},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33651500940322876},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.3306831121444702},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31695061922073364},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2026170790195465}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.9179249405860901},{"id":"https://openalex.org/C122770356","wikidata":"https://www.wikidata.org/wiki/Q1656753","display_name":"Identifiability","level":2,"score":0.8923344612121582},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7171554565429688},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6533685922622681},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.4845675528049469},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.469249963760376},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.46721068024635315},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.4505480229854584},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4344303607940674},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4273255467414856},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.4101089835166931},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3730104863643646},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3428080677986145},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33651500940322876},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.3306831121444702},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31695061922073364},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2026170790195465},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.14778/3484224.3484231","is_oa":false,"landing_page_url":"https://doi.org/10.14778/3484224.3484231","pdf_url":null,"source":{"id":"https://openalex.org/S4210226185","display_name":"Proceedings of the VLDB Endowment","issn_l":"2150-8097","issn":["2150-8097"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the VLDB Endowment","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6600000262260437,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1557833142","https://openalex.org/W1992926795","https://openalex.org/W2019735187","https://openalex.org/W2053637704","https://openalex.org/W2070410525","https://openalex.org/W2091815328","https://openalex.org/W2101771965","https://openalex.org/W2158037536","https://openalex.org/W2167372639","https://openalex.org/W2184587911","https://openalex.org/W2294409705","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2795435272","https://openalex.org/W2798657499","https://openalex.org/W2871261967","https://openalex.org/W2886435782","https://openalex.org/W2887995258","https://openalex.org/W2890707666","https://openalex.org/W2903389359","https://openalex.org/W2911978475","https://openalex.org/W2949973832","https://openalex.org/W2962727778","https://openalex.org/W2963062476","https://openalex.org/W2963207607","https://openalex.org/W3071470454","https://openalex.org/W3106873467","https://openalex.org/W3181858657","https://openalex.org/W3211025647","https://openalex.org/W4205228770","https://openalex.org/W6789088953"],"related_works":["https://openalex.org/W2724847603","https://openalex.org/W2034041141","https://openalex.org/W2184661725","https://openalex.org/W2900187352","https://openalex.org/W2573470972","https://openalex.org/W2105626102","https://openalex.org/W2131038454","https://openalex.org/W112856298","https://openalex.org/W145130300","https://openalex.org/W4312041519"],"abstract_inverted_index":{"Differential":[0],"privacy":[1,19,27,34,43,49,53,61,78,137,179,194],"allows":[2,197],"bounding":[3],"the":[4,73,87,127,132,139,145,174],"influence":[5],"that":[6,159,196],"training":[7,146,203],"data":[8,23,91,198],"records":[9],"have":[10],"on":[11,77,86,126,183],"a":[12,124],"machine":[13,21],"learning":[14],"model.":[15],"To":[16],"use":[17],"differential":[18,136,178,193],"in":[20,47,144,164,177],"learning,":[22],"scientists":[24,199],"must":[25],"choose":[26,67],"parameters":[28,35,44,54],"(\u03f5,":[29,80,111,120,211],"\u03b4":[30,112,121,212],").":[31,213],"Choosing":[32],"meaningful":[33],"is":[36],"key,":[37],"since":[38],"models":[39],"trained":[40],"with":[41],"weak":[42],"might":[45,55,82],"result":[46],"excessive":[48],"leakage,":[50],"while":[51],"strong":[52],"overly":[56],"degrade":[57],"model":[58,202],"utility.":[59],"However,":[60],"parameter":[62],"values":[63],"are":[64,114],"difficult":[65],"to":[66,106,109,123,180,200],"for":[68,102,151],"two":[69],"main":[70],"reasons.":[71],"First,":[72],"theoretical":[74],"upper":[75],"bound":[76,125,149],"loss":[79],"\u03b4)":[81],"be":[83,162],"loose,":[84],"depending":[85],"chosen":[88],"sensitivity":[89],"and":[90,99,156,204,209],"distribution":[92],"of":[93,131,141,191],"practical":[94],"datasets.":[95],"Second,":[96],"legal":[97],"requirements":[98],"societal":[100],"norms":[101],"anonymization":[103],"often":[104],"refer":[105],"individual":[107],"identifiability,":[108],"which":[110,172],")":[113,122],"only":[115],"indirectly":[116],"related.":[117],"We":[118,187],"transform":[119],"Bayesian":[128],"posterior":[129],"belief":[130],"adversary":[133,175,195],"assumed":[134,176],"by":[135],"concerning":[138],"presence":[140],"any":[142],"record":[143],"dataset.":[147],"The":[148],"holds":[150],"multidimensional":[152],"queries":[153],"under":[154],"composition,":[155],"we":[157,167],"show":[158],"it":[160],"can":[161],"tight":[163],"practice.":[165],"Furthermore,":[166],"derive":[168],"an":[169,189],"identifiability":[170,207],"bound,":[171],"relates":[173],"previous":[181],"work":[182],"membership":[184],"inference":[185],"adversaries.":[186],"formulate":[188],"implementation":[190],"this":[192],"audit":[201],"compute":[205],"empirical":[206,210],"scores":[208]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}