{"id":"https://openalex.org/W7167890304","doi":"https://doi.org/10.56553/popets-2026-0070","title":"VeriDP: Verifiable Differentially Private Training","display_name":"VeriDP: Verifiable Differentially Private Training","publication_year":2026,"publication_date":"2026-07-01","ids":{"openalex":"https://openalex.org/W7167890304","doi":"https://doi.org/10.56553/popets-2026-0070"},"language":null,"primary_location":{"id":"doi:10.56553/popets-2026-0070","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0070","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0070.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2026/popets-2026-0070.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051006664","display_name":"Behzad Abdolmaleki","orcid":"https://orcid.org/0009-0008-8335-2787"},"institutions":[{"id":"https://openalex.org/I91136226","display_name":"University of Sheffield","ror":"https://ror.org/05krs5044","country_code":"GB","type":"education","lineage":["https://openalex.org/I91136226"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Behzad Abdolmaleki","raw_affiliation_strings":["University of Sheffield"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sheffield","institution_ids":["https://openalex.org/I91136226"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102751600","display_name":"Amir R. Asadi","orcid":"https://orcid.org/0000-0002-3436-3307"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Amir R. Asadi","raw_affiliation_strings":["University of Cambridge"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102748906","display_name":"Vahid R. Asadi","orcid":"https://orcid.org/0000-0001-8354-7463"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Vahid R. Asadi","raw_affiliation_strings":["University of Waterloo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073873169","display_name":"Stefan K\u00f6psell","orcid":"https://orcid.org/0000-0002-0466-562X"},"institutions":[{"id":"https://openalex.org/I4210113131","display_name":"Barkhausen Institut","ror":"https://ror.org/0260qqv98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210113131"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefan K\u00f6psell","raw_affiliation_strings":["Barkhausen Institut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Barkhausen Institut","institution_ids":["https://openalex.org/I4210113131"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140414003","display_name":"Bhavish Mohee","orcid":null},"institutions":[{"id":"https://openalex.org/I91136226","display_name":"University of Sheffield","ror":"https://ror.org/05krs5044","country_code":"GB","type":"education","lineage":["https://openalex.org/I91136226"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bhavish Mohee","raw_affiliation_strings":["University of Sheffield"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sheffield","institution_ids":["https://openalex.org/I91136226"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140402137","display_name":"Nahid Roustaeifar","orcid":null},"institutions":[{"id":"https://openalex.org/I91136226","display_name":"University of Sheffield","ror":"https://ror.org/05krs5044","country_code":"GB","type":"education","lineage":["https://openalex.org/I91136226"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Nahid Roustaeifar","raw_affiliation_strings":["University of Sheffield"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sheffield","institution_ids":["https://openalex.org/I91136226"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005726919","display_name":"Maryam Zarezadeh","orcid":null},"institutions":[{"id":"https://openalex.org/I4210113131","display_name":"Barkhausen Institut","ror":"https://ror.org/0260qqv98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210113131"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maryam Zarezadeh","raw_affiliation_strings":["Barkhausen Institut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Barkhausen Institut","institution_ids":["https://openalex.org/I4210113131"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.73839608,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"3","first_page":"48","last_page":"64"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8971999883651733,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8971999883651733,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.05770000070333481,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.02590000070631504,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.8615999817848206},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.8587999939918518},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.7361999750137329},{"id":"https://openalex.org/keywords/stochastic-gradient-descent","display_name":"Stochastic gradient descent","score":0.6204000115394592},{"id":"https://openalex.org/keywords/gas-meter-prover","display_name":"Gas meter prover","score":0.5845999717712402},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.5063999891281128},{"id":"https://openalex.org/keywords/secure-multi-party-computation","display_name":"Secure multi-party computation","score":0.4221000075340271},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.41749998927116394}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.8615999817848206},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.8587999939918518},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.7361999750137329},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6699000000953674},{"id":"https://openalex.org/C206688291","wikidata":"https://www.wikidata.org/wiki/Q7617819","display_name":"Stochastic gradient descent","level":3,"score":0.6204000115394592},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.5845999717712402},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.5063999891281128},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5012000203132629},{"id":"https://openalex.org/C18396474","wikidata":"https://www.wikidata.org/wiki/Q2465888","display_name":"Secure multi-party computation","level":3,"score":0.4221000075340271},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.41749998927116394},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.40790000557899475},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3677999973297119},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.36070001125335693},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.3440999984741211},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.33970001339912415},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C4199805","wikidata":"https://www.wikidata.org/wiki/Q2725903","display_name":"Gaussian noise","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2808000147342682},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.27709999680519104},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C149728462","wikidata":"https://www.wikidata.org/wiki/Q751319","display_name":"Minimax","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2597000002861023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25589999556541443},{"id":"https://openalex.org/C2780909371","wikidata":"https://www.wikidata.org/wiki/Q4801092","display_name":"Artificial noise","level":4,"score":0.2531000077724457},{"id":"https://openalex.org/C90119067","wikidata":"https://www.wikidata.org/wiki/Q43260","display_name":"Polynomial","level":2,"score":0.2506999969482422}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2026-0070","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0070","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0070.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2026-0070","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0070","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0070.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3363461494","display_name":null,"funder_award_id":"23.08","funder_id":"https://openalex.org/F4320322909","funder_display_name":"Isaac Newton Trust"},{"id":"https://openalex.org/G4586653508","display_name":null,"funder_award_id":"ECF-2023-189","funder_id":"https://openalex.org/F4320319993","funder_display_name":"Leverhulme Trust"}],"funders":[{"id":"https://openalex.org/F4320319993","display_name":"Leverhulme Trust","ror":"https://ror.org/012mzw131"},{"id":"https://openalex.org/F4320322909","display_name":"Isaac Newton Trust","ror":"https://ror.org/02gn6ta77"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7167890304.pdf","grobid_xml":"https://content.openalex.org/works/W7167890304.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Stochastic":[0,168],"Gradient":[1,169],"Descent":[2,170],"(SGD)":[3],"is":[4],"the":[5,60,82,137,192],"foundation":[6],"of":[7,85,116,145,165,194],"modern":[8],"machine":[9],"learning":[10],"(ML).":[11],"In":[12],"privacy-sensitive":[13],"settings,":[14],"gradients":[15,34],"can":[16,56],"reveal":[17],"details":[18],"about":[19],"individual":[20],"data":[21,28,128],"points.":[22],"Differential":[23],"Privacy":[24],"(DP)":[25],"protects":[26],"sensitive":[27],"during":[29],"ML":[30],"training":[31,76],"by":[32],"clipping":[33],"and":[35,80,104,107,122,161,175,180,203,210],"adding":[36],"calibrated":[37],"Gaussian":[38,123],"noise.":[39],"However,":[40],"existing":[41],"frameworks":[42],"assume":[43],"semi-honest":[44],"participants,":[45],"which":[46],"fails":[47],"in":[48,92,154],"adversarial":[49,155],"or":[50,58,129],"federated":[51],"environments":[52],"where":[53],"malicious":[54],"actors":[55],"bypass":[57],"alter":[59],"noise":[61,124],"addition":[62],"process,":[63],"breaking":[64],"privacy":[65,139,151,174],"guarantees.":[66],"We":[67],"present":[68],"VeriDP,":[69],"a":[70,159],"framework":[71],"for":[72,178],"verifiable":[73,109,176],"differentially":[74,86],"private":[75,87,127],"that":[77,134,186],"cryptographically":[78],"enforces":[79],"proves":[81],"correct":[83,117],"execution":[84],"stochastic":[88],"gradient":[89,118],"descent":[90],"(DP-SGD)":[91],"zero":[93],"knowledge.":[94],"VeriDP":[95,141],"integrates":[96],"Zero-Knowledge":[97,163],"Proofs":[98],"(ZKPs)":[99],"with":[100,191],"polynomial":[101],"commitments,":[102],"sumcheck":[103],"GKR-based":[105],"proofs,":[106],"incrementally":[108],"computation":[110,177],"(IVC)":[111],"to":[112],"generate":[113],"compact":[114,209],"proofs":[115],"computation,":[119],"clipping,":[120],"averaging,":[121],"generation\u2014without":[125],"revealing":[126],"randomness.":[130],"Unlike":[131],"previous":[132],"systems":[133],"only":[135],"verify":[136],"final":[138],"budget,":[140],"enables":[142],"per-iteration":[143],"verifiability":[144],"each":[146],"model":[147],"update,":[148],"providing":[149],"strong":[150],"assurances":[152],"even":[153],"settings.":[156],"This":[157],"establishes":[158],"novel":[160],"complete":[162],"Proof":[164],"Differentially":[166],"Private":[167],"(ZK-DPSGD),":[171],"uniting":[172],"differential":[173],"secure":[179],"auditable":[181],"ML.":[182],"Our":[183],"evaluation":[184],"shows":[185],"prover":[187],"time":[188,200],"increases":[189],"linearly":[190],"number":[193],"input":[195],"samples,":[196],"while":[197],"both":[198],"verifier":[199],"(2\u20135":[201],"ms)":[202],"proof":[204],"size":[205],"(3\u20134":[206],"KB)":[207],"remain":[208],"effectively":[211],"constant.":[212]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-07-11T00:00:00"}