Confidentiality protection in the 2020 US Census of Population and Housing

JM Abowd, MB Hawes - Annual Review of Statistics and Its …, 2023 - annualreviews.org
In an era where external data and computational capabilities far exceed statistical agencies'
own resources and capabilities, they face the renewed challenge of protecting the …

Crypten: Secure multi-party computation meets machine learning

B Knott, S Venkataraman, A Hannun… - Advances in …, 2021 - proceedings.neurips.cc
Secure multi-party computation (MPC) allows parties to perform computations on data while
keeping that data private. This capability has great potential for machine-learning …

Are we there yet? timing and floating-point attacks on differential privacy systems

J Jin, E McMurtry, BIP Rubinstein… - 2022 IEEE Symposium …, 2022 - ieeexplore.ieee.org
Differential privacy is a de facto privacy framework that has seen adoption in practice via a
number of mature software platforms. Implementation of differentially private (DP) …

The distributed discrete gaussian mechanism for federated learning with secure aggregation

P Kairouz, Z Liu, T Steinke - International Conference on …, 2021 - proceedings.mlr.press
We consider training models on private data that are distributed across user devices. To
ensure privacy, we add on-device noise and use secure aggregation so that only the noisy …

The skellam mechanism for differentially private federated learning

N Agarwal, P Kairouz, Z Liu - Advances in Neural …, 2021 - proceedings.neurips.cc
We introduce the multi-dimensional Skellam mechanism, a discrete differential privacy
mechanism based on the difference of two independent Poisson random variables. To …

Practical and private (deep) learning without sampling or shuffling

P Kairouz, B McMahan, S Song… - International …, 2021 - proceedings.mlr.press
We consider training models with differential privacy (DP) using mini-batch gradients. The
existing state-of-the-art, Differentially Private Stochastic Gradient Descent (DP-SGD) …

[PDF][PDF] The 2020 census disclosure avoidance system topdown algorithm

JM Abowd, R Ashmead… - Harvard Data …, 2022 - assets.pubpub.org
ABSTRACT The Census TopDown Algorithm (TDA) is a disclosure avoidance system using
differential privacy for privacy-loss accounting. The algorithm ingests the final, edited version …

Hiding among the clones: A simple and nearly optimal analysis of privacy amplification by shuffling

V Feldman, A McMillan, K Talwar - 2021 IEEE 62nd Annual …, 2022 - ieeexplore.ieee.org
Recent work of Erlingsson, Feldman, Mironov, Raghunathan, Talwar, and Thakurta 1
demonstrates that random shuffling amplifies differential privacy guarantees of locally …

Hyperparameter tuning with renyi differential privacy

N Papernot, T Steinke - arXiv preprint arXiv:2110.03620, 2021 - arxiv.org
For many differentially private algorithms, such as the prominent noisy stochastic gradient
descent (DP-SGD), the analysis needed to bound the privacy leakage of a single training …

The fundamental price of secure aggregation in differentially private federated learning

WN Chen, CAC Choo, P Kairouz… - … on Machine Learning, 2022 - proceedings.mlr.press
We consider the problem of training a $ d $ dimensional model with distributed differential
privacy (DP) where secure aggregation (SecAgg) is used to ensure that the server only sees …