@misc{dl3-b-private-gradient-clipping-1,
  title = {Deep Learning with Differential Privacy},
  author = {Martín Abadi and Andy Chu and Ian Goodfellow and H. Brendan McMahan and Ilya Mironov and Kunal Talwar and Li Zhang},
  year = {2016},
  url = {https://arxiv.org/abs/1607.00133},
  howpublished = {arXiv preprint},
  archivePrefix = {arXiv},
  eprint = {1607.00133},
  note = {Cited author-manuscript edition; peer review is not inferred from arXiv}
}

@misc{dl3-b-private-gradient-clipping-2,
  title = {Understanding Gradient Clipping in Private SGD: A Geometric Perspective},
  author = {Xiangyi Chen and Zhiwei Steven Wu and Mingyi Hong},
  year = {2020},
  url = {https://arxiv.org/abs/2006.15429},
  howpublished = {arXiv preprint},
  archivePrefix = {arXiv},
  eprint = {2006.15429},
  note = {Cited author-manuscript edition; peer review is not inferred from arXiv}
}

@misc{dl3-b-private-gradient-clipping-3,
  title = {Differentially Private Learning with Adaptive Clipping},
  author = {Galen Andrew and Om Thakkar and H. Brendan McMahan and Swaroop Ramaswamy},
  year = {2019},
  url = {https://arxiv.org/abs/1905.03871},
  howpublished = {arXiv preprint},
  archivePrefix = {arXiv},
  eprint = {1905.03871},
  note = {Cited author-manuscript edition; peer review is not inferred from arXiv}
}

@misc{dl3-b-private-gradient-clipping-4,
  title = {Renyi Differential Privacy},
  author = {Ilya Mironov},
  year = {2017},
  url = {https://arxiv.org/abs/1702.07476},
  howpublished = {arXiv preprint},
  archivePrefix = {arXiv},
  eprint = {1702.07476},
  note = {Cited author-manuscript edition; peer review is not inferred from arXiv}
}

@inproceedings{dl3-b-private-gradient-clipping-5,
  title = {Subsampled Renyi Differential Privacy and Analytical Moments Accountant},
  author = {Yu-Xiang Wang and Borja Balle and Shiva Prasad Kasiviswanathan},
  year = {2019},
  url = {https://proceedings.mlr.press/v89/wang19b.html},
  booktitle = {Proceedings of the Twenty-Second International Conference on Artificial Intelligence and Statistics},
  volume = {89},
  pages = {1226-1235}
}

@inproceedings{dl3-b-private-gradient-clipping-6,
  title = {Differential Privacy Has Disparate Impact on Model Accuracy},
  author = {Eugene Bagdasaryan and Omid Poursaeed and Vitaly Shmatikov},
  year = {2019},
  url = {https://papers.nips.cc/paper/2019/hash/fc0de4e0396fff257ea362983c2dda5a-Abstract.html},
  booktitle = {Advances in Neural Information Processing Systems},
  volume = {32},
  pages = {15479-15488}
}