arXiv:2510.01744cs.LG2025-10被引 1

调优私有训练参数能改善公平性,但可能泄露隐私,需权衡三者关系。

Private and Fair Machine Learning: Revisiting the Disparate Impact of Differentially Private SGD

  • 直接在私有模型上优化超参数,避免非私有模型的参数迁移
  • 私有训练仍存在对公平性的不公平影响,且不同指标间差异明显
  • 尽管改善了效用与公平的平衡,但超参调优会引入额外隐私泄露

差分隐私(DP)是保护数据分析中个人隐私的主流方法。使用差分隐私随机梯度下降(DPSGD)训练神经网络会影响学习动态和输出,进而影响模型性能与公平性。多数研究认为其对公平性有负面影响,但近期有观点指出,若直接在私有模型上优化超参数(而非沿用非私有模型的参数),可实现与非私有模型相当的公平性水平。本文通过比较DPSGD在不同性能指标上的差异影响,并在广泛超参数设置下分析,发现某一指标的不公平不意味着其他指标也如此。更重要的是,虽然直接优化无法可靠缓解DPSGD的不公平影响,但仍能提升效用-公平性权衡,优于复用非私有模型的超参数。然而,我们强调任何超参数调优都会带来额外隐私泄露,需谨慎权衡隐私、效用与公平。最后,我们扩展分析至DPSGD-Global-Adapt这一旨在减轻准确率不公平的变体,发现其效果对超参数选择并不鲁棒。

原文摘要 · Abstract (English)

Differential privacy (DP) is a prominent method for protecting information about individuals during data analysis. Training neural networks with differentially private stochastic gradient descent (DPSGD) influences the model's learning dynamics and, consequently, its output. This can affect the model's performance and fairness. While the majority of studies on the topic report a negative impact on fairness, it has recently been suggested that fairness levels comparable to non-private models can be achieved by optimizing hyperparameters for performance directly on differentially private models (rather than re-using hyperparameters from non-private models, as is common practice). In this work, we analyze the generalizability of this claim by 1) comparing the disparate impact of DPSGD on different performance metrics, and 2) analyzing it over a wide range of hyperparameter settings. We highlight that a disparate impact on one metric does not necessarily imply a disparate impact on another. Most importantly, we show that while optimizing hyperparameters directly on differentially private models does not mitigate the disparate impact of DPSGD reliably, it can still lead to improved utility-fairness trade-offs compared to re-using hyperparameters from non-private models. We stress, however, that any form of hyperparameter tuning entails additional privacy leakage, calling for careful considerations of how to balance privacy, utility and fairness. Finally, we extend our analyses to DPSGD-Global-Adapt, a variant of DPSGD designed to mitigate the disparate impact on accuracy, and conclude that this alternative may not be a robust solution with respect to hyperparameter choice.

差分隐私公平性模型训练

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。