[23] A. Girgis, D. Data, S. Diggavi, P. Kairouz, and A. T. Suresh, "Shuffled model of differential privacy in federated learning," in International Conference on Artificial Intelligence and Statistics. PMLR, 2021, pp. 2521-2529.
[24] A. M. Girgis, D. Data, S. Diggavi, P. Kairouz, and A. T. Suresh, "Shuffled model of federated learning: Privacy, accuracy and communication trade-offs," IEEE journal on selected areas in information theory, vol. 2, no. 1, pp. 464-478, 2021.
[25] V. Feldman and K. Talwar, "Lossless compression of efficient private local randomizers," in International Conference on Machine Learning. PMLR, 2021, pp. 3208-3219.
[26] A. Shah, W.-N. Chen, J. Balle, P. Kairouz, and L. Theis, “Optimal compression of locally differentially private mechanisms,” in International Conference on Artificial Intelligence and Statistics. PMLR, 2022, pp. 7680–7723.
[27] K. Chaudhuri, C. Guo, and M. Rabbat, “Privacy-aware compression for federated data analysis,” in The 38th Conference on Uncertainty in Artificial Intelligence, 2022.
[28] A. Koskela, J. Jälkö, L. Prediger, and A. Honkela, “Tight differential privacy for discrete-valued mechanisms and for the subsampled gaussian mechanism using fft,” in International Conference on Artificial Intelligence and Statistics. PMLR, 2021, pp. 3358–3366.
[29] A. Koskela, J. Jalkö, and A. Honkela, "Computing tight differential privacy guarantees using fft," in International Conference on Artificial Intelligence and Statistics. PMLR, 2020, pp. 2560-2569.
[30] W.-N. Chen, D. Song, A. Ozgur, and P. Kairouz, “Privacy amplification via compression: Achieving the optimal privacy-accuracy-communication trade-off in distributed mean estimation,” arXiv preprint arXiv:2304.01541, 2023.
[31] C. Dwork and G. N. Rothblum, “Concentrated differential privacy,” arXiv preprint arXiv:1603.01887, 2016.
[32] M. Bun, C. Dwork, G. N. Rothblum, and T. Steinke, "Composable and versatile privacy via truncated cdp," in Proceedings of the 50th Annual ACM SIGACT Symposium on Theory of Computing, 2018, pp. 74-86.
[33] Q. Zheng, J. Dong, Q. Long, and W. Su, "Sharp composition bounds for gaussian differential privacy via edgeworth expansion," in International Conference on Machine Learning. PMLR, 2020, pp. 11420-11435.
[34] Z. Bu, J. Dong, Q. Long, and W. J. Su, "Deep learning with gaussian differential privacy," Harvard data science review, vol. 2020, no. 23, 2020.
[35] Q. Zheng, S. Chen, Q. Long, and W. Su, “Federated f-differential privacy,” in International Conference on Artificial Intelligence and Statistics. PMLR, 2021, pp. 2251–2259.
[36] R. Jin, Y. Huang, X. He, H. Dai, and T. Wu, "Stochastic-Sign SGD for federated learning with theoretical guarantees," arXiv preprint arXiv:2002.10940, 2020.
[37] W. Wen, C. Xu, F. Yan, C. Wu, Y. Wang, Y. Chen, and H. Li, "TernGrad: Ternary gradients to reduce communication in distributed deep learning," in Advances in Neural Information Processing Systems, 2017, pp. 1509-1519.
[38] M. Safaryan, E. Shulgin, and P. Richtárik, “Uncertainty principle for communication compression in distributed and federated learning and the search for an optimal compressor,” arXiv preprint arXiv:2002.08958, 2020.
[39] Y. Lyubarskii and R. Vershynin, "Uncertainty principles and vector quantization," IEEE Transactions on Information Theory, vol. 56, no. 7, pp. 3491-3501, 2010.
[40] W.-N. Chen, C. A. C. Choo, P. Kairouz, and A. T. Suresh, “The fundamental price of secure aggregation in differentially private federated learning,” in International Conference on Machine Learning. PMLR, 2022, pp. 3056–3089.
[41] E. L. Lehmann, J. P. Romano, and G. Casella, Testing statistical hypotheses. Springer, 2005, vol. 3.
[42] J. Lee, M. Kim, S. W. Kwak, and S. Jung, "Differentially private multivariate statistics with an application to contingency table analysis," arXiv preprint arXiv:2211.15019, 2022.
[43] Y. Liu, K. Sun, L. Kong, and B. Jiang, "Identification, amplification and measurement: A bridge to gaussian differential privacy," arXiv preprint arXiv:2210.09269, 2022.