arXiv:2509.00693cs.LGcs.AI2025-09中稿 · IEEE International…被引 2

让数据在保持实用性的前提下,自动隐藏敏感信息。

DELTA: Variational Disentangled Learning for Privacy-Preserving Data Reprogramming

  • 分两阶段生成特征:先找有用变换,再用变分模型去除非敏感信息。
  • 在8个数据集上提升预测准确率9.3%,隐私泄露降低35%。
  • 适合需要合规处理敏感数据的医疗、金融等场景。

在真实应用中,领域数据常包含可识别或敏感属性,受严格法规(如HIPAA、GDPR)约束,且需显式特征工程以保证可解释性与透明性。现有特征工程多聚焦下游任务性能提升,常导致隐私泄露风险。本文将此任务泛化为隐私保护的数据重编程(PPDR):给定数据集,转换特征以最大化目标属性预测准确率,同时最小化敏感属性预测准确率。该任务面临两大挑战:1)在庞大搜索空间中生成高实用性特征变换;2)从以效用为导向的特征中解耦并消除敏感信息,降低隐私可推断性。为此,提出DELTA,一种两阶段变分解耦生成学习框架。第一阶段使用策略引导的强化学习发现具有下游任务效用的特征变换,不考虑隐私可推断性。第二阶段采用变分LSTM seq2seq编码器-解码器结构,设计效用-隐私解耦的潜在空间,并引入对抗-因果解耦正则化,抑制特征生成过程中的隐私信号。在8个数据集上的实验表明,DELTA在预测性能上提升约9.3%,隐私泄露降低约35%,展现出鲁棒且具备隐私意识的数据转换能力。

原文摘要 · Abstract (English)

In real-world applications, domain data often contains identifiable or sensitive attributes, is subject to strict regulations (e.g., HIPAA, GDPR), and requires explicit data feature engineering for interpretability and transparency. Existing feature engineering primarily focuses on advancing downstream task performance, often risking privacy leakage. We generalize this learning task under such new requirements as Privacy-Preserving Data Reprogramming (PPDR): given a dataset, transforming features to maximize target attribute prediction accuracy while minimizing sensitive attribute prediction accuracy. PPDR poses challenges for existing systems: 1) generating high-utility feature transformations without being overwhelmed by a large search space, and 2) disentangling and eliminating sensitive information from utility-oriented features to reduce privacy inferability. To tackle these challenges, we propose DELTA, a two-phase variational disentangled generative learning framework. Phase I uses policy-guided reinforcement learning to discover feature transformations with downstream task utility, without any regard to privacy inferability. Phase II employs a variational LSTM seq2seq encoder-decoder with a utility-privacy disentangled latent space design and adversarial-causal disentanglement regularization to suppress privacy signals during feature generation. Experiments on eight datasets show DELTA improves predictive performance by ~9.3% and reduces privacy leakage by ~35%, demonstrating robust, privacy-aware data transformation.

隐私保护特征工程解耦学习数据重编程

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。