[AKOOMS23] G. Andrew, P. Kairouz, S. Oh, A. Oprea, H. B. McMahan, and V. Suriyakumar. “One-shot Empirical Privacy Estimation for Federated Learning”. In: arXiv preprint arXiv:2302.03098 (2023). URL: https://arxiv.org/abs/2302.03098 (cit. on p. 7).
[BGDCTV18] B. Bichsel, T. Gehr, D. Drachsler-Cohen, P. Tsankov, and M. Vechev. "Dp-finder: Finding differential privacy violations by sampling and optimization". In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. 2018, pp. 508-524 (cit. on pp. 1, 7).
[BNSSSU16] R. Bassily, K. Nissim, A. Smith, T. Steinke, U. Stemmer, and J. Ullman. "Algorithmic stability for adaptive data analysis". In: Proceedings of the forty-eighth annual ACM symposium on Theory of Computing. 2016, pp. 1046-1059. URL: https://arxiv.org/abs/1511.02513 (cit. on pp. 2, 8).
[BS98] D. Boneh and J. Shaw. "Collusion-secure fingerprinting for digital data". In: IEEE Transactions on Information Theory 44.5 (1998), pp. 1897-1905 (cit. on p. 7).
[BW18] B. Balle and Y.-X. Wang. “Improving the gaussian mechanism for differential privacy: Analytical calibration and optimal denoising”. In: International Conference on Machine Learning. PMLR. 2018, pp. 394–403. URL: https://arxiv.org/abs/1805.06530 (cit. on p. 8).
[CCNSTT22] N. Carlini, S. Chien, M. Nasr, S. Song, A. Terzis, and F. Tramer. "Membership inference attacks from first principles". In: 2022 IEEE Symposium on Security and Privacy (SP). IEEE. 2022, pp. 1897-1914. URL: https://arxiv.org/abs/2112.03570 (cit. on pp. 8, 10).
[DBHSB22] S. De, L. Berrada, J. Hayes, S. L. Smith, and B. Balle. "Unlocking high-accuracy differentially private image classification through scale". In: arXiv preprint arXiv:2204.13650 (2022) (cit. on p. 4).
[De12] A. De. “Lower bounds in differential privacy”. In: Theory of Cryptography: 9th Theory of Cryptography Conference, TCC 2012, Taormina, Sicily, Italy, March 19-21, 2012. Proceedings 9. Springer. 2012, pp. 321-338. URL: https://arxiv.org/abs/1107.2183 (cit. on p. 8).
[DFHPRR15a] C. Dwork, V. Feldman, M. Hardt, T. Pitassi, O. Reingold, and A. Roth. "Generalization in adaptive data analysis and holdout reuse". In: Advances in Neural Information Processing Systems 28 (2015). URL: https://arxiv.org/abs/1506.02629 (cit. on pp. 2, 4, 8).
[DFHPRR15b] C. Dwork, V. Feldman, M. Hardt, T. Pitassi, O. Reingold, and A. L. Roth. "Preserving statistical validity in adaptive data analysis". In: Proceedings of the forty-seventh annual ACM symposium on Theory of computing. 2015, pp. 117-126. URL: https://arxiv.org/abs/1411.2664 (cit. on pp. 2, 8).
[DMNS06] C. Dwork, F. McSherry, K. Nissim, and A. Smith. "Calibrating noise to sensitivity in private data analysis". In: Theory of Cryptography: Third Theory of Cryptography Conference, TCC 2006, New York, NY, USA, March 4-7, 2006. Proceedings 3. Springer. 2006, pp. 265-284. URL: https://www.iacr.org/archive/tcc2006/38760266/38760266.pdf (cit. on p. 1).
[DN03] I. Dinur and K. Nissim. “Revealing information while preserving privacy”. In: Proceedings of the twenty-second ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems. 2003, pp. 202-210 (cit. on p. 8).
[DSSU17] C. Dwork, A. Smith, T. Steinke, and J. Ullman. "Exposed! a survey of attacks on private data". In: Annual Review of Statistics and Its Application 4 (2017), pp. 61-84. URL: https://doi.org/10.1146/annurev-statistics-060116-054123 (cit. on p. 8).
[DSSUV15] C. Dwork, A. Smith, T. Steinke, J. Ullman, and S. Vadhan. "Robust traceability from trace amounts". In: 2015 IEEE 56th Annual Symposium on Foundations of Computer Science. IEEE. 2015, pp. 650-669 (cit. on p. 7).