← Search

Igor Shilov

4 accepted papers

2025

Certification for Differentially Private Prediction in Gradient-Based Training

ICML 2025poster

We study private prediction where differential privacy is achieved by adding noise to the outputs of a non-private model. Existing methods rely on noise proportional to the global sensitivity of the model, often resulting in sub-optimal privacy-utility trade-offs compared to private training. We int…

2025

Exploring the limits of strong membership inference attacks on large language models

NeurIPS 2025poster

State-of-the-art membership inference attacks (MIAs) typically require training many reference models, making it difficult to scale these attacks to large pre-trained language models (LLMs). As a result, prior research has either relied on weaker attacks that avoid training references (e.g., fine-tu…

Cited by 0SourceScholar
2024

Copyright Traps for Large Language Models

ICML 2024poster

Questions of fair use of copyright-protected content to train Large Language Models (LLMs) are being actively debated. Document-level inference has been proposed as a new task: inferring from black-box access to the trained model whether a piece of content has been seen during training. SOTA methods…

2021

Antipodes of Label Differential Privacy: PATE and ALIBI

NeurIPS 2021poster

We consider the privacy-preserving machine learning (ML) setting where the trained model must satisfy differential privacy (DP) with respect to the labels of the training examples. We propose two novel approaches based on, respectively, the Laplace mechanism and the PATE framework, and demonstrate t…