[2] B. McMahan, E. Moore, D. Ramage, S. Hampson, and B. A. y Arcas, "Communication-efficient learning of deep networks from decentralized data," in Artificial Intelligence and Statistics. PMLR, 2017, pp. 1273-1282.
[3] P. Kairouz, H. B. McMahan, B. Avent, A. Bellet, M. Dennis, A. N. Bhagoji, K. Bonawitz, Z. Charles, G. Cormode, R. Cummings et al., "Advances and open problems in federated learning," Foundations and Trends in Machine Learning, vol. 14, no. 1, 2021.
[4] C. Dwork, F. McSherry, K. Nissim, and A. Smith, "Calibrating noise to sensitivity in private data analysis," in Theory of cryptography conference. Springer, 2006, pp. 265-284.
[5] I. Mironov, "On significance of the least significant bits for differential privacy," in Proceedings of the 2012 ACM conference on Computer and communications security, 2012, pp. 650-661.
[6] N. Agarwal, A. T. Suresh, F. X. X. Yu, S. Kumar, and B. McMahan, "cpSGD: Communication-efficient and differentially-private distributed SGD," in Advances in Neural Information Processing Systems, 2018, pp. 7564-7575.
[7] P. Kairouz, Z. Liu, and T. Steinke, “The distributed discrete gaussian mechanism for federated learning with secure aggregation,” in International Conference on Machine Learning. PMLR, 2021, pp. 5201–5212.
[8] N. Agarwal, P. Kairouz, and Z. Liu, "The shellam mechanism for differentially private federated learning," Advances in Neural Information Processing Systems, vol. 34, pp. 5052-5064, 2021.
[9] W.-N. Chen, A. Ozgur, and P. Kairouz, “The poisson binomial mechanism for unbiased federated learning with secure aggregation,” in International Conference on Machine Learning. PMLR, 2022, pp. 3490–3506.
[10] T. T. Nguyen, X. Xiao, Y. Yang, S. C. Hui, H. Shin, and J. Shin, "Collecting and analyzing data from smart device users with local differential privacy," arXiv preprint arXiv:1606.05053, 2016.
[11] T. Wang, J. Zhao, X. Yang, and X. Ren, "Locally differentially private data collection and analysis," arXiv preprint arXiv:1906.01777, 2019.
[12] V. Gandikota, D. Kane, R. K. Maity, and A. Mazumdar, "Vqsgd: Vector quantized stochastic gradient descent," in International Conference on Artificial Intelligence and Statistics. PMLR, 2021, pp. 2197-2205.
[13] W.-N. Chen, P. Kairouz, and A. Ozgur, “Breaking the communication-privacy-accuracy trilemma,” Advances in Neural Information Processing Systems, vol. 33, pp. 3312–3324, 2020.
[14] A. T. Suresh, X. Y. Felix, S. Kumar, and H. B. McMahan, "Distributed mean estimation with limited communication," in International conference on machine learning. PMLR, 2017, pp. 3329-3337.
[15] J. Dong, A. Roth, and W. Su, "Gaussian differential privacy," Journal of the Royal Statistical Society, 2021.
[16] I. Mironov, “Rényi differential privacy,” in IEEE Computer Security Foundations Symposium (CSF). IEEE, 2017, pp. 263–275.
[17] A. El Ouadrhiri and A. Abdelhadi, "Differential privacy for deep and federated learning: A survey," IEEE Access, vol. 10, pp. 22359-22380, 2022.
[18] C. Dwork, K. Kenthapadi, F. McSherry, I. Mironov, and M. Naor, “Our data, ourselves: Privacy via distributed noise generation,” in Annual international conference on the theory and applications of cryptographic techniques. Springer, 2006, pp. 486-503.
[19] S. P. Kasiviswanathan, H. K. Lee, K. Nissim, S. Raskhodnikova, and A. Smith, “What can we learn privately?” SIAM Journal on Computing, vol. 40, no. 3, pp. 793–826, 2011.
[20] C. L. Canonne, G. Kamath, and T. Steinke, “The discrete gaussian for differential privacy,” Advances in Neural Information Processing Systems, vol. 33, pp. 15676-15688, 2020.
[21] G. Cormode and I. L. Markov, "Bit-efficient numerical aggregation and stronger privacy for trust in federated analytics," arXiv preprint arXiv:2108.01521, 2021.
[22] P. Kairouz, S. Oh, and P. Viswanath, "Extremal mechanisms for local differential privacy," The Journal of Machine Learning Research, vol. 17, no. 1, pp. 492-542, 2016.