English

Tight Auditing of Differential Privacy in MST and AIM

Cryptography and Security 2026-04-21 v1 Artificial Intelligence Machine Learning

Abstract

State-of-the-art Differentially Private (DP) synthetic data generators such as MST and AIM are widely used, yet tightly auditing their privacy guarantees remains challenging. We introduce a Gaussian Differential Privacy (GDP)-based auditing framework that measures privacy via the full false-positive/false-negative tradeoff. Applied to MST and AIM under worst-case settings, our method provides the first tight audits in the strong-privacy regime. For (ϵ,δ)=(1,102)(\epsilon,\delta)=(1,10^{-2}), we obtain μemp0.43\mu_{emp}\approx0.43 vs. implied μ=0.45\mu=0.45, showing a small theory-practice gap. Our code is publicly available: https://github.com/sassoftware/dpmm.

Keywords

Cite

@article{arxiv.2604.18352,
  title  = {Tight Auditing of Differential Privacy in MST and AIM},
  author = {Georgi Ganev and Meenatchi Sundaram Muthu Selva Annamalai and Bogdan Kulynych},
  journal= {arXiv preprint arXiv:2604.18352},
  year   = {2026}
}

Comments

Accepted to the Theory and Practice of Differential Privacy Workshop (TPDP 2026)