[16] C.-L. Li, W.-C. Chang, Y. Cheng, Y. Yang, and B. Póczos. "Mmd gan: Towards deeper understanding of moment matching network". In: Proceedings of the 30th Advances in neural information processing systems. 2017.
[17] Y. Li, K. Swersky, and R. Zemel. "Generative moment matching networks". In: International conference on machine learning. 2015, pp. 1718-1727.
[18] F. Liese and I. Vajda. “Convex Statistical Distances”. Teubner, Leipzig, 1987.
[19] S. P. Liew, T. Takahashi, and M. Ueno. “PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learning”. In: International Conference on Learning Representations. 2022.
[20] Z. Liu, P. Luo, X. Wang, and X. Tang. "Deep Learning Face Attributes in the Wild". In: Proceedings of International Conference on Computer Vision (ICCV). 2015.
[21] Y. Long, B. Wang, Z. Yang, B. Kailkhura, A. Zhang, C. A. Gunter, and B. Li. “G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminators”. In: Proceedings of 34th Advances in Neural Information Processing Systems. 2021.
[22] F. D. McSherry. "Privacy integrated queries: an extensible platform for privacy-preserving data analysis". In: Proceedings of the 2009 ACM SIGMOD International Conference on Management of data. 2009, pp. 19-30.
[23] I. Mironov. “Rényi differential privacy”. In: 2017 IEEE 30th computer security foundations symposium (CSF). IEEE. 2017, pp. 263–275.
[24] I. Mironov, K. Talwar, and L. Zhang. “Rényi differential privacy of the sampled gaussian mechanism” (2019). arXiv:1908.10530.
[25] A. Rahimi and B. Recht. "Random features for large-scale kernel machines". In: Proceedings of the 20th International Conference on Neural Information Processing Systems. 2007, pp. 1177-1184.
[26] A. Rényi. "On measures of entropy and information". In: Proceedings of the Fourth Berkeley Symposium on Mathematical Statistics and Probability. Vol. 1. 1961, pp. 547-562.
[27] B. K. Striperumbudur, K. Fukumizu, and G. R. Lanckriet. "Universality, Characteristic Kernels and RKHS Embedding of Measures". Journal of Machine Learning Research, vol. 12, no. 7 (2011).
[28] G. Stein et al. "Exposing flaws of generative model evaluation metrics and their unfair treatment of diffusion models". arXiv:2306.04675. 2023.
[29] R. Torkzadehmahani, P. Kairouz, and B. Paten. "DP-CGAN: Differentially Private Synthetic Data and Label Generation". In: IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW). 2019, pp. 98-104.
[30] T. Van Erven and P. Harremos. “Rényi divergence and Kullback-Leibler divergence”. IEEE Transactions on Information Theory, vol. 60, no. 7 (2014), pp. 3797–3820.
[31] M. Vinaroz, M.-A. Charusaie, F. Harder, K. Adamczewski, and M. J. Park. "Hermite Polynomial Features for Private Data Generation". In: Proceedings of the 39th International Conference on Machine Learning. Vol. 162. 2022, pp. 22300-22324.
[32] B. Wang and N. Hegde. "Privacy-preserving q-learning with functional noise in continuous spaces". In: Proceedings of the 32nd Advances in Neural Information Processing Systems. 2019.
[33] B. Wang, F. Wu, Y. Long, L. Rimanic, C. Zhang, and B. Li. "Datalens: Scalable privacy preserving training via gradient compression and aggregation". In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. 2021, pp. 2146-2168.