Demo Data from EDBT 2026 / reviewers in the wild / expert
Ayesha Samreen
dblp:283/2070
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2025
0009-0004-6374-4135ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Privacy and data protection · 100% |
Topics — the 2 heaviest of 2, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Privacy and data protection › differential privacy
differentially private deep learning |
0.9 | 1 | 2025 | PLRV-O: Advancing Differentially Private Deep Learning via Privacy Loss Random Variable Optimization · CCS 2025 |
Privacy and data protection
differential privacy |
0.9 | 1 | 2025 | PLRV-O: Advancing Differentially Private Deep Learning via Privacy Loss Random Variable Optimization · CCS 2025 |
Methods — techniques the papers use, named apart from their topics
noise distribution optimization · 0.9gaussian mechanism · 0.9DP-SGD · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | PLRV-O: Advancing Differentially Private Deep Learning via Privacy Loss Random Variable OptimizationabstractDifferentially Private Stochastic Gradient Descent (DP-SGD) is a standard method for enforcing privacy in deep learning, typically using the Gaussian mechanism to perturb gradient updates. However, conventional mechanisms such as Gaussian and Laplacian noise are parameterized only by variance or scale. This single degree of freedom ties the magnitude of noise directly to both privacy loss and utility degradation, preventing independent control of these two factors. The problem becomes more pronounced when the number of composition rounds T and batch size B vary across tasks, as these variations induce task-dependent shifts in the privacy–utility trade-off, where small changes in noise parameters can disproportionately affect model accuracy. To address this limitation, we introduce PLRV-O, a framework that defines a broad search space of parameterized DP-SGD noise distributions, where privacy loss moments are tightly characterized yet can be optimized more independently with respect to utility loss. This formulation enables systematic adaptation of noise to task-specific requirements, including (i) model size, (ii) training duration, (iii) batch sampling strategies, and (iv) clipping thresholds under both training and fine-tuning settings. Empirical results demonstrate that PLRV-O substantially improves utility under strict privacy constraints. On CIFAR-10, a fine-tuned ViT achieves 94.03% accuracy at ∈ ≈ 0.5, compared to 83.93% with Gaussian noise. On SST-2, RoBERTa-large reaches 92.20% accuracy at ∈ ≈ 0.2, versus 50.25% with Gaussian. Source code is available at https://github.com/datasec-lab/plrvo. Qin Yang 0009, Nicholas Stout, Meisam Mohammady, Han Wang 0021, Ayesha Samreen, Christopher J. Quinn, Yan Yan 0002, Ashish Kundu, Yuan Hong 0001 |
CCS | 5 |