Trustworthy DD · Distribution and feature matching
DP-GENG
DP-GENG: Differentially Private Dataset Distillation Guided by DP-Generated Data
Shuo Shi, Jinghuai Zhang, Shijie Jiang, Chunyi Zhou, Yuyuan Li, Mengying Zhu, Yangyang Wu, Tianyu Du
AAAI 2026 · first public 2025-11-13 · arXiv 2511.09876
In one paragraph
Initializes the distilled dataset with DP-generated data for realism, then refines it under a small privacy budget with a DP-feature-matching (distribution-matching) objective and aligns examples to their class distribution with an expert model, alongside a privacy-budget allocation strategy with a theoretical DP guarantee. Reports outperforming prior differentially-private dataset-distillation methods in both utility and robustness to membership-inference attacks.
Where it sits
- Distribution and feature matching (Surrogate matching)
- Setting: Image classification
Abstract (verbatim from arXiv)
Dataset distillation (DD) compresses large datasets into smaller ones while preserving the performance of models trained on them. Although DD is often assumed to enhance data privacy by aggregating over individual examples, recent studies reveal that standard DD can still leak sensitive information from the original dataset due to the lack of formal privacy guarantees. Existing differentially private (DP)-DD methods attempt to mitigate this risk by injecting noise into the distillation process. However, they often fail to fully leverage the original dataset, resulting in degraded realism and utility. This paper introduces \libn, a novel framework that addresses the key limitations of current DP-DD by leveraging DP-generated data. Specifically, \lib initializes the distilled dataset with DP-generated data to enhance realism. Then, generated data refines the DP-feature matching technique to distill the original dataset under a small privacy budget, and trains an expert model to align the distilled examples with their class distribution. Furthermore, we design a privacy budget allocation strategy to determine budget consumption across DP components and provide a theoretical analysis of the overall privacy guarantees. Extensive experiments show that \lib significantly outperforms state-of-the-art DP-DD methods in terms of both dataset utility and robustness against membership inference attacks, establishing a new paradigm for privacy-preserving dataset distillation.
BibTeX (generated; prefer the venue's official entry)
@article{shi2025geng,
title = {DP-GENG: Differentially Private Dataset Distillation Guided by DP-Generated Data},
author = {Shuo Shi and Jinghuai Zhang and Shijie Jiang and Chunyi Zhou and Yuyuan Li and Mengying Zhu and Yangyang Wu and Tianyu Du},
journal = {AAAI 2026},
year = {2025}
}Nearby in Distribution and feature matching
RAHA — Rank-Aware Hyperbolic Alignment for Vision-Language Dataset Distillation
Jongoh Jeong, Sun-Kyung Lee, Kuk-Jin Yoon · ECCV 2026notableVision–languagepaper ↗code ↗
MDM — Multimodal Distribution Matching for Vision-Language Dataset Distillation
Jongoh Jeong, Hoyong Kwon, Minseok Kim et al. · CVPR 2026notableVision–languagepaper ↗code ↗
Harmonic Dataset Distillation for Time Series Forecasting
Seungha Hong, Sanghwan Jang, Wonbin Kweon et al. · AAAI 2026notableTime seriespaper ↗
Algorithmic Guarantees for Distilling Supervised and Offline RL Datasets
Aaryan Gupta, Rishi Saket, Aravindan Raghuveer · ICLR 2026notableOther datapaper ↗