Image Classification on MNIST VAE m=32 latent space (test)
98.29AccuracyNo randomization
Evaluation results
| Method | Links | |
|---|---|---|
| No randomizationPrivacy Budget (ε)=N/A, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 98.29 | |
| PrivUnit2 + PAPrivacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 84.27 | |
| PrivUnitG + PAPrivacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 76.47 | |
| PrivUnit2 + PAPrivacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 72.52 | |
| PrivUnitG + PAPrivacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 65.78 | |
| PrivUnit2Privacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 57.29 | |
| PrivUnit2 + PAPrivacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 52.14 | |
| PrivUnitG + PAPrivacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 48.61 | |
| PrivUnit2 + PAPrivacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 47.2 | |
| PrivUnitGPrivacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 46.82 | |
| PrivUnitG + PAPrivacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 44.32 | |
| PrivUnit2Privacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 43.6 | |
| PrivUnit2 + PAPrivacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 42.03 | |
| PrivUnitG + PAPrivacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 39.89 | |
| PrivUnitGPrivacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 38.62 | |
| PrivUnit2 + PAPrivacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 36.74 | |
| Laplace + PAPrivacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 36.66 | |
| PrivUnitG + PAPrivacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 35.38 | |
| PrivUnit2 + PAPrivacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 31.74 | |
| PrivUnitG + PAPrivacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 30.83 | |
| PrivUnit2Privacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 30.21 | |
| Laplace + PAPrivacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 28.46 | |
| PrivUnitGPrivacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 28.38 | |
| PrivUnit2Privacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 27.67 | |
| PrivUnit2 + PAPrivacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 26.96 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 26.85 | |
| PrivUnitG + PAPrivacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 26.46 | |
| PrivUnitGPrivacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 26.32 | |
| PrivUnit2Privacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 25.26 | |
| PrivUnitGPrivacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 24.24 | |
| PrivUnit2Privacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 22.89 | |
| PrivUnit2 + PAPrivacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 22.63 | |
| PrivUnitG + PAPrivacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 22.36 | |
| PrivUnitGPrivacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 22.17 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 21.73 | |
| Laplace + PAPrivacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 20.91 | |
| PrivUnit2Privacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 20.63 | |
| PrivUnitGPrivacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 20.14 | |
| Laplace + PAPrivacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 19.56 | |
| PrivUnit2 + PAPrivacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 18.75 | |
| PrivUnitG + PAPrivacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 18.62 | |
| PrivUnit2Privacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 18.55 | |
| Laplace + PAPrivacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 18.28 | |
| PrivUnitGPrivacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 18.22 | |
| Laplace (ℓ1)Privacy Budget (ε)=10.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 17.32 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 17.06 | |
| Laplace + PAPrivacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 17.04 | |
| PrivUnit2Privacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 16.59 | |
| PrivUnitGPrivacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 16.4 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 16.23 | |
| Laplace + PAPrivacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 15.84 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 15.42 | |
| PrivUnit2 + PAPrivacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 15.36 | |
| PrivUnitG + PAPrivacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 15.28 | |
| Laplace (ℓ1)Privacy Budget (ε)=7.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 15.24 | |
| Laplace + PAPrivacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 14.74 | |
| PrivUnit2Privacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 14.74 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 14.66 | |
| PrivUnitGPrivacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 14.62 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 13.92 | |
| Laplace + PAPrivacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 13.69 | |
| Laplace (ℓ1)Privacy Budget (ε)=5.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 13.36 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 13.23 | |
| PrivUnit2Privacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 13.07 | |
| Laplace (ℓ1)Privacy Budget (ε)=4.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 13.02 | |
| PrivUnitGPrivacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.9 | |
| Laplace + PAPrivacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.71 | |
| Laplace (ℓ1)Privacy Budget (ε)=4.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.67 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.53 | |
| PrivUnit2 + PAPrivacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.5 | |
| PrivUnitG + PAPrivacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.42 | |
| Laplace (ℓ1)Privacy Budget (ε)=3.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.34 | |
| Laplace (ℓ1)Privacy Budget (ε)=3.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 12.02 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.91 | |
| Laplace + PAPrivacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.78 | |
| Laplace (ℓ1)Privacy Budget (ε)=2.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.71 | |
| PrivUnit2Privacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.52 | |
| Laplace (ℓ1)Privacy Budget (ε)=2.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.39 | |
| PrivUnitGPrivacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.39 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.27 | |
| Laplace (ℓ1)Privacy Budget (ε)=1.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 11.08 | |
| Laplace + PAPrivacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 10.92 | |
| Laplace (ℓ1)Privacy Budget (ε)=1.0, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 10.78 | |
| CW [Muthukrishnan and Kalyani, 2025]+PA w/o boundingPrivacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 10.69 | |
| Laplace (ℓ1)Privacy Budget (ε)=0.5, Classifier=Non-Linear MLP with ReLU, m=322026.05 | 10.5 |