[DWWZK18] Z. Ding, Y. Wang, G. Wang, D. Zhang, and D. Kifer. “Detecting violations of differential privacy”. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. 2018, pp. 475–489 (cit. on pp. 1, 7).
[HSRDTMPSNC08] N. Homer, S. Szelinger, M. Redman, D. Duggan, W. Tembe, J. Muehling, J. V. Pearson, D. A. Stephan, S. F. Nelson, and D. W. Craig. “Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays”. In: PLoS genetics 4.8 (2008), e1000167 (cit. on p. 7).
[JE19] B. Jayaraman and D. Evans. "Evaluating differentially private machine learning in practice". In: USENIX Security Symposium. 2019 (cit. on p. 7).
[JLNRSMS19] C. Jung, K. Ligett, S. Neel, A. Roth, S. Sharifi-Malvajerdi, and M. Shenfeld. “A new analysis of differential privacy's generalization guarantees”. In: arXiv preprint arXiv:1909.03577 (2019). URL: https://arxiv.org/abs/1909.03577 (cit. on pp. 2, 4, 8).
[JUO20] M. Jagielski, J. Ullman, and A. Oprea. "Auditing differentially private machine learning: How private is private sgd?" In: Advances in Neural Information Processing Systems 33 (2020), pp. 22205-22216 (cit. on pp. 1, 7).
[KS14] S. P. Kasiviswanathan and A. Smith. “On the‘semantics’ of differential privacy: A bayesian formulation”. In: Journal of Privacy and Confidentiality 6.1 (2014). URL: https://arxiv.org/abs/0803.3946 (cit. on p. 4).
[LMFLZWRFT22] F. Lu, J. Munoz, M. Fuchs, T. LeBlond, E. Zaresky-Williams, E. Raff, F. Ferraro, and B. Testa. “A General Framework for Auditing Differentially Private Machine Learning”. In: arXiv preprint arXiv:2210.08643 (2022) (cit. on p. 7).
[MEMPST21] M. Malek Esmaeili, I. Mironov, K. Prasad, I. Shilov, and F. Tramer. “Antipodes of label differential privacy: Pate and alibi”. In: Advances in Neural Information Processing Systems 34 (2021), pp. 6934–6945 (cit. on pp. 1, 8).
[MSS22] S. Maddock, A. Sablayrolles, and P. Stock. "CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning". In: arXiv preprint arXiv:2210.02912 (2022) (cit. on pp. 5, 7).
[NHSBTJCT23] M. Nasr, J. Hayes, T. Steinke, B. Balle, F. Tramèr, M. Jagielski, N. Carlini, and A. Terzis. “Tight Auditing of Differentially Private Machine Learning”. In: arXiv preprint arXiv:2302.07956 (2023). URL: https://arxiv.org/abs/2302.07956 (cit. on pp. 1, 4, 5, 7).
[NSTPC21] M. Nasr, S. Song, A. Thakurta, N. Papernot, and N. Carlini. “Adversary instantiation: Lower bounds for differentially private machine learning”. In: 2021 IEEE Symposium on security and privacy (SP). IEEE. 2021, pp. 866–882. URL: https://arxiv.org/abs/2101.04535 (cit. on p. 7).
[PAKMOO23] K. Pillutla, G. Andrew, P. Kairouz, H. B. McMahan, A. Oprea, and S. Oh. "Unleashing the Power of Randomization in Auditing Differentially Private ML". In: arXiv preprint arXiv:2305.18447 (2023). URL: https://arxiv.org/abs/2305.18447 (cit. on p. 8).
[RRST16] R. Rogers, A. Roth, A. Smith, and O. Thakkar. "Max-information, differential privacy, and post-selection hypothesis testing". In: 2016 IEEE 57th Annual Symposium on Foundations of Computer Science (FOCS). IEEE. 2016, pp. 487-494. URL: https://arxiv.org/abs/1604.03924 (cit. on pp. 2, 4, 8).
[SOJH09] S. Sankararaman, G. Obozinski, M. I. Jordan, and E. Halperin. "Genomic privacy and limits of individual detection in a pool". In: Nature genetics 41.9 (2009), pp. 965-967 (cit. on p. 7).
[SSSS17] R. Shokri, M. Stronati, C. Song, and V. Shmatikov. "Membership inference attacks against machine learning models". In: 2017 IEEE symposium on security and privacy (SP). IEEE. 2017, pp. 3-18 (cit. on p. 7).