What Gradients Add to Text Leakage in Split Language Models, Counted per Token and per Document

Split-language-model gradients boost token recovery to 97.38% and document reconstruction to 37.77%, so split traffic requires per-token and per-document leakage reporting.

Georgios Politis, Evangelos Pappas

Published Oct 2, 2026 · ▲ 8 on Hugging Face

Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench

MLLMU-Bench evaluates privacy risks in multimodal large language models via standardized leakage and inference benchmarks.

Zheyuan Liu, Guangyao Dou, Mengzhao Jia, Zhaoxuan Tan and 3 more

Published 2025 · 5 citations

Verification of Machine Unlearning is Fragile

Verification of machine unlearning is fragile because model providers can circumvent verification strategies and retain supposedly unlearned data.

Binchi Zhang, Zihan Chen, Cong Shen, Jundong Li

Published Aug 1, 2024 · 0 citations

On the Price of Privacy for Language Identification and Generation

Xiaoyu Li, Andi Han, Jiaojiao Jiang, Junbin Gao

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Privacy Meets Hierarchy: Differentially Private Distributed Trilevel Learning

Yang Jiao, Kai Yang

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

DP-EGGROLL: Centered Fitness-Vector Privatization for Backprop-Free Differentially Private Optimization

David T Zagardo

Paris Poster Session 4, Thu, Dec 10, 5:30 PM–7:30 PM, Paris Poster Hall · Published 2026

I2V-DETACH: Source Grounding Detachment for Unauthorized Image-to-Video Generation

Chanhui Lee, Yeonghwan Song, Yewon Kang, Jeany Son

Sydney Poster Session 3, Wed, Dec 9, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Tail Wags the Model: Generalization and Membership Privacy Trade-offs of Sharpness-Aware Minimization

Young In Kim, Rajiv Khanna

Atlanta Poster Session 3, Thu, Dec 10, 10:00 AM–1:00 PM, Hall C1 · Published 2026

GraphIP–Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?

Kaixiang Zhao, Bolin Shen, Yuyang Dai, Shayok Chakraborty and 1 more

Atlanta Poster Session 3, Thu, Dec 10, 10:00 AM–1:00 PM, Hall C1 · Published 2026

Privacy-Preserving Retrieval-Augmented Generation with Plausible Deniability

Wenxuan Bao, Shan Jin, Vincent Bindschaedler, Yiwei Cai

Atlanta Poster Session 1, Wed, Dec 9, 10:00 AM–1:00 PM, Hall C1 · Published 2026

Optimal Rates for Adaptive Private $k$-PCA

Johanna Düngler, Amartya Sanyal

Paris Poster Session 4, Thu, Dec 10, 5:30 PM–7:30 PM, Paris Poster Hall · Published 2026

Benchmarking Membership Privacy Risks in Preference-Based LLM Post-Training

Lorenzo Rossi, Kaif Shaikh, Franziska Boenisch, Adam Dziedzic

Sydney Poster Session 5, Thu, Dec 10, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Auditing Privacy Leakage in Tabular Foundation Model Embeddings

Xun Wang, Adam Dziedzic, Michael Backes, Franziska Boenisch

Sydney Poster Session 3, Wed, Dec 9, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Guarding the Life Code: Preserving Membership Privacy in Genomic Foundation Models

Xinyu Zhao, Jinhao Duan, Zhen Tan, Tianlong Chen

Atlanta Poster Session 6, Fri, Dec 11, 4:30 PM–7:30 PM, Hall C1 · Published 2026

Ask in the Crowd: Differentially Private LLM Inference via Dummy-Augmented Shuffling

Zhihao Liu, Zixiong Guo, Shuo Shao, Yu He and 4 more

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

How Private is Private? A Comparative Study for Face De-Identification

Hui Wei, Hao Yu, Hui Kuurila-Zhang, Guoying Zhao

Sydney Poster Session 2, Tue, Dec 8, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

LDPCache: Locally Differentially Private Multi-Query Processing with Cache Optimization for Large Language Models

Haoqiang Shi, Ning Wang, Chuan He, Qian Ma and 4 more

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Towards Hyperparameter Transfer for Differentially Private Optimization

Tianze Wang, Zhiqi Bu, Linjun Zhang

Atlanta Poster Session 2, Wed, Dec 9, 4:30 PM–7:30 PM, Hall C1 · Published 2026

Auditing Single-Query Recoverability in Self-Supervised Representations

zirui wang, Guangqiang He, PangWu, Peng Wang and 4 more

Sydney Poster Session 2, Tue, Dec 8, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Personalized Safety in Federated Fine-Tuning of Large Language Models

Tianzhe Xiao, Gaozhuo Liu, Yichen Li, Haozhao Wang and 3 more

Paris Poster Session 4, Thu, Dec 10, 5:30 PM–7:30 PM, Paris Poster Hall · Published 2026

EntiRE: Invariant Learning for Robust Concept Erasure in Text-to-Image Generative Models

Fengyuan Yu, Yuyuan Li, XiaoHua Feng, Li Zhang and 4 more

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

The Price of Locality in Label Privacy: Optimal Rates for Classification and Regression

Zongrui Zou, Mina Dalirrooyfard, Jingcheng Liu, Jalaj Upadhyay

Sydney Poster Session 3, Wed, Dec 9, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

On Differential Private $\ell_1$, $\ell_2$ and $\ell_p^p$ Distance Queries

Erzhi Liu, Jerry Yao-Chieh Hu, Alex Reneau, Zhao Song and 1 more

Sydney Poster Session 2, Tue, Dec 8, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

A Private Empirical Defense Against Privacy Audits

Saloni Modi, Srivi Balaji, Yusong Zhu, Gautam Kamath and 1 more

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Budget-Conditioned Clipping Policies for Differentially Private Federated Learning

Hao Zhou, SiQi Cai, Hua Dai, Letian Sha and 2 more

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

MUTE: Multi-Level Alignment Uncoupling Against Talking-Head Exploitation for Voice Protection

Donghyun Kim, Jin Hong, seungmin Kim, Dain Kim and 2 more

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Position: LLM Privacy Requires a Lifecycle-Wide Approach

Niloofar Mireshghallah, Tianshi Li

Atlanta Poster Session 4, Thu, Dec 10, 4:30 PM–7:30 PM, Hall C1 · Published 2026

Don't Deploy Fine-Tuned Genomic Foundation Models Without Privacy Evaluation: Reconstruction Vulnerability Is Unpredictable Without Empirical Measurement

Reem Al-Saidi, Erman Ayday, Ziad Kobti

Atlanta Poster Session 5, Fri, Dec 11, 10:00 AM–1:00 PM, Hall C1 · Published 2026

Inference for Many Quantiles under Local Differential Privacy

Qirui Hu, Yi Liu

Atlanta Poster Session 1, Wed, Dec 9, 10:00 AM–1:00 PM, Hall C1 · Published 2026

Felid: A Flexible and Efficient Design for Transformer Fine-Tuning over Encrypted Data

Linru Zhang, Jun J Sim, Xiangning Wang, Jiahao Zhong and 10 more

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Shared-Noise Mechanisms for Verifiable Differentially Private Counting

Sehyeon Park, Chenglin Fan

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Settling Pure Differentially Private Covariance Estimation

Tommaso d’Orsi, Gleb Novikov, Walter McKelvie

Sydney Poster Session 3, Wed, Dec 9, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

On Differentially Private Mechanisms for Linear Regression

Bardiya Aryanfard, Monika Henzinger, Farhood Rostamkhani

Paris Poster Session 1, Wed, Dec 9, 12:30 PM–2:30 PM, Paris Poster Hall · Published 2026

Improved Robust Verifiable Federated Learning Based on Packed Secret Sharing

Jinhyuk Choi, Hyung Tae Lee

Sydney Poster Session 3, Wed, Dec 9, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Evaluating an Evaluation: Membership Inference Attacks as Machine Unlearning Diagnostics

Umid Suleymanov, Laman Aliyeva, Nihat Abdullayev, Saida Zarbiyeva and 1 more

Atlanta Poster Session 4, Thu, Dec 10, 4:30 PM–7:30 PM, Hall C1 · Published 2026

Local FDR Membership Inference Attacks: Multiple Testing and the Role of Ridge Regularization

Jinyoung Hong, Bonwoo Lee, Jeongyoun Ahn

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Optimal Byzantine-resilient Federated Learning with User-level Differential Privacy

Ming Xiang, Stratis Ioannidis, Edmund Yeh, Carlee Joe-Wong and 1 more

Atlanta Poster Session 4, Thu, Dec 10, 4:30 PM–7:30 PM, Hall C1 · Published 2026

Private Online Prediction from Experts with Small Losses

Bo Li, Peng Ye

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Estimating Model-Level Membership Inference Vulnerability Without Reference Models

Euodia Dodd, Natasa Krco, Igor Shilov, Matthew R Wicker and 1 more

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Asymptotically Optimal Best Arm Identification with Fixed-Budget under Differential Privacy

Keqin Chen, Jie Bian, Yulian Wu, Vincent Tan

Sydney Poster Session 2, Tue, Dec 8, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

On the Feasibility of Identity Manipulation for Diffusion-Based Face Privacy Preservation

Xuemei Jia, JIAWEI DU, Jiawei Liu, xin zhang and 3 more

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

How Far Are VLMs from Privacy Awareness in the Physical World? An Empirical Study

Junran Wang, Xinjie Shen, Zehao Jin, Pan Li

Sydney Poster Session 5, Thu, Dec 10, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Privately Clipping Heavy-Tailed Data

Matthew Joseph, Alex Kulesza

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Online Allocation with Differential Privacy

Jianyi Yang, Xingyu Zhou, Mostafa Mushsharat, Shaolei Ren

Atlanta Poster Session 2, Wed, Dec 9, 4:30 PM–7:30 PM, Hall C1 · Published 2026

Exposing Private Corpus Leakage in Multimodal RAG

Yihao LIU, XINQI LYU, Dong Wang, Bin Xiao

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

A Generative Model of Contextual Integrity: Appropriate vs. Inappropriate Information Sharing

Omer Ebead, Juan Formanek, Joel Leibo

Sydney Poster Session 5, Thu, Dec 10, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Rank-Aware Differentially Private Release of Listwise Preferences for LLM Alignment

Junwei Chen, Manjiang Yu, Pengpeng Qiao, Yang Cao

Sydney Poster Session 5, Thu, Dec 10, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

CLIOPATRA: Extracting Private Information from LLM Insights

CLIOPATRA attacks privacy-preserving LLM insight platforms with malicious chats to leak target medical histories with nearly 100% precision in 65% of cases, showing layered heuristic protections are insufficient.

Meenatchi Sundaram Muthu Selva Annamalai, Emiliano De Cristofaro, Peter Kairouz

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Sampling-Free Privacy Accounting for Matrix Mechanisms under Random Allocation

Developing sampling-free Rényi divergence and conditional composition bounds improves privacy amplification for matrix mechanisms under random allocation without Monte Carlo sampling.

Jan Schuchardt, Nikita Kalinin

Sydney Poster Session 5, Thu, Dec 10, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Understanding Private Evolution as Learning-Augmented Clustering

Private Evolution is recast as learning-augmented clustering to derive tighter bounds via generative models and propose a geometry-aware variant with convergence guarantees.

Audra McMillan, Kunal Talwar, Felix Zhou

Atlanta Poster Session 1, Wed, Dec 9, 10:00 AM–1:00 PM, Hall C1 · Published 2026

Shuffle and Joint Differential Privacy for Generalized Linear Contextual Bandits

Algorithms for generalized linear contextual bandits achieve shuffle-DP regret scaling as $\tilde O(d^{3/2}\sqrt{T}/\sqrt{\varepsilon})$ and joint-DP regret matching non-private rates plus additive privacy corrections without spectral assumptions.

Sahasrajit Sarmasarkar

Paris Poster Session 5, Fri, Dec 11, 11:30 AM–1:30 PM, Paris Poster Hall · Published 2026

Re-examining Low Rank adaptation for private LLM fine-tuning

DP-SGD noise inflates gradient singular values and disrupts decay, yet restoring fast decay improves private LLM fine-tuning efficiency without compromising privacy guarantees.

Ali Dadsetan, Frank Rudzicz

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Membership Inference on Synthetic Single-Cell Genomic Data

Membership inference attacks successfully identify training donors in synthetic single-cell RNA-seq data, revealing that leading generation methods inadequately protect privacy and leak more as donor counts drop.

Steven Golob, Patrick McKeever, Sikha Pentyala, Martine De Cock and 1 more

Paris Poster Session 2, Wed, Dec 9, 5:00 PM–7:00 PM, Paris Poster Hall · Published 2026

It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMs

SELFCI uses complementary self-distillation to decouple information suppression from task resolution, improving contextual integrity without degrading utility.

Sangwoo Park, Woongyeong Yeo, Yumin Choi, Hyomin Lee and 5 more

Sydney Poster Session 6, Thu, Dec 10, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026 · ▲ 29 on Hugging Face · Code ★ 6

What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents

SP-Mem decouples memory utility from private-value exposure via isolated storage and consent-based retrieval, improving personalization while reducing unnecessary privacy exposure.

Wenjie Wang, Wenhe Si, Xinyue Xu, Yue Xu

Sydney Poster Session 1, Tue, Dec 8, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

SynBench: A Benchmark for Differentially Private Text Generation

SynBench benchmarks differentially private text generators across standardized datasets, revealing quality drops on out-of-distribution private data and invalidated privacy guarantees from pre-training contamination.

Yidan Sun, Viktor Schlegel, Srinivasan Nandakumar, Iqra Zahid and 8 more

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

Optimal Rates for Pure $\varepsilon$-Differentially Private Stochastic Convex Optimization with Heavy Tails

Pure ε-DP heavy-tailed stochastic convex optimization achieves minimax optimal excess risk via polynomial-time private Lipschitz extension optimization, including deterministic algorithms for structured losses with unbounded gradients.

Andrew Lowy

Atlanta Poster Session 4, Thu, Dec 10, 4:30 PM–7:30 PM, Hall C1 · Published 2026

SMI: Statistical Membership Inference for Reliable Unlearned Model Auditing

SMI replaces MIA-based unlearned model auditing with training-free statistical estimation of non-member mixture proportions in feature space, yielding reliable forgetting rates and bootstrap reliability ranges.

Jialong Sun, Zeming Wei, Jiaxuan Zou, Jiacheng Gong and 5 more

Sydney Poster Session 3, Wed, Dec 9, 10:00 AM–1:00 PM, Hall 1-4 · Published 2026

Sequential Membership Inference Attacks

Sequential membership inference attacks exploit model update sequences and canary insertion timing to achieve tighter privacy audits with higher attack power than single-model baselines.

Thomas Michel, Debabrota Basu, Emilie Kaufmann

Sydney Poster Session 4, Wed, Dec 9, 5:00 PM–8:00 PM, Hall 1-4 · Published 2026

PACZero: PAC-Private Fine-Tuning of Language Models via Sign Quantization

PACZero sign-quantizes zeroth-order gradients to achieve zero mutual information fine-tuning with near-baseline accuracy on language models.

Murat Bilgehan Ertan, Xiaochen Zhu, Ha Nguyen, Marten van Dijk and 1 more

Paris Poster Session 6, Fri, Dec 11, 2:30 PM–4:30 PM, Paris Poster Hall · Published 2026