Demo Data from EDBT 2026 / reviewers in the wild / expert
Philip Sosnin
dblp:380/3244
· DBLP profile ↗
2ranked-venue papers
1as first author
2since 2021 · last 2026
0009-0006-8929-4624ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 2 · 1 first-author · 2 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Privacy and data protection · 100% | |
| Artificial intelligence
1 paper |
Trustworthy machine learning · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Privacy and data protection
differential privacy |
0.9 | 1 | 2025 | Certification for Differentially Private Prediction in Gradient-Based Training · ICML 2025 |
Privacy and data protection › differential privacy
private prediction |
0.9 | 1 | 2025 | Certification for Differentially Private Prediction in Gradient-Based Training · ICML 2025 |
Privacy and data protection › differential privacy › privacy mechanism design
sensitivity analysis |
0.9 | 1 | 2025 | Certification for Differentially Private Prediction in Gradient-Based Training · ICML 2025 |
Machine learning › Trustworthy machine learning › privacy
privacy-preserving machine learning |
0.3 | 1 | 2025 | Certification for Differentially Private Prediction in Gradient-Based Training · ICML 2025 |
Methods — techniques the papers use, named apart from their topics
smooth sensitivity · 1.7convex relaxation · 1.7bound propagation · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming
Philip Sosnin, Jodie Knapp, Fraser Kennedy, Josh Collyer, Calvin Tsay |
CPAIOR | 1 |
| 2025 | Certification for Differentially Private Prediction in Gradient-Based TrainingabstractWe study private prediction where differential privacy is achieved by adding noise to the outputs of a non-private model. Existing methods rely on noise proportional to the global sensitivity of the model, often resulting in sub-optimal privacy-utility trade-offs compared to private training. We introduce a novel approach for computing dataset-specific upper bounds on prediction sensitivity by leveraging convex relaxation and bound propagation techniques. By combining these bounds with the smooth sensitivity mechanism, we significantly improve the privacy analysis of private prediction compared to global sensitivity-based approaches. Experimental results across real-world datasets in medical image classification and natural language processing demonstrate that our sensitivity bounds are can be orders of magnitude tighter than global sensitivity. Our approach provides a strong basis for the development of novel privacy preserving technologies. Matthew Wicker, Philip Sosnin, Igor Shilov, Adrianna Janik, Mark Niklas Müller, Yves-Alexandre de Montjoye, Adrian Weller, Calvin Tsay |
ICML | 2 |