arXiv:2504.14368cs.LGcs.CR2025-04NeurIPS被引 4

用元数据生成模拟数据,解决表格数据隐私训练缺公共数据难题

Do You Really Need Public Data? Surrogate Public Data for Differential Privacy on Tabular Data

  • 仅凭字段名、类型等元数据生成模拟表格数据
  • 在隐私分类器预训练中效果接近真实公共数据
  • 适合缺乏公开数据的表格数据隐私建模场景

差分隐私机器学习通常依赖公共数据进行隐私-效用权衡评估、超参数调优和预训练。然而,在表格数据领域,由于跨域异质性强,公共数据假设往往不成立。本文提出利用强大先验生成‘代理公共数据’:仅基于字段名、类型和取值范围等公开元数据,合成真实感强的表格数据,无需访问敏感记录。该方法通过大语言模型自动化生成两种形式的代理数据:直接输出CSV记录,或构建结构因果模型采样。实验表明,代理公共数据在私有表格分类器预训练中可有效替代传统公共数据;对DP数据生成器的超参数调优及隐私-效用权衡估计亦具价值。

原文摘要 · Abstract (English)

Differentially private (DP) machine learning often relies on the availability of public data for tasks like privacy-utility trade-off estimation, hyperparameter tuning, and pretraining. While public data assumptions may be reasonable in text and image domains, they are less likely to hold for tabular data due to tabular data heterogeneity across domains. We propose leveraging powerful priors to address this limitation; specifically, we synthesize realistic tabular data directly from schema-level specifications - such as variable names, types, and permissible ranges - without ever accessing sensitive records. To that end, this work introduces the notion of "surrogate" public data - datasets generated independently of sensitive data, which consume no privacy loss budget and are constructed solely from publicly available schema or metadata. Surrogate public data are intended to encode plausible statistical assumptions (informed by publicly available information) into a dataset with many downstream uses in private mechanisms. We automate the process of generating surrogate public data with large language models (LLMs); in particular, we propose two methods: direct record generation as CSV files, and automated structural causal model (SCM) construction for sampling records. Through extensive experiments, we demonstrate that surrogate public tabular data can effectively replace traditional public data when pretraining differentially private tabular classifiers. To a lesser extent, surrogate public data are also useful for hyperparameter tuning of DP synthetic data generators, and for estimating the privacy-utility tradeoff.

差分隐私表格数据数据合成代理数据

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。