arXiv:2602.05833cs.LG2026-02

用搜索方法生成隐私保护数据,既保真实分布又防泄露

SecretFan: Synthesizing Realistic Data without Breaking Privacy

  • 用模糊测试生成样本,用判别器筛选优质数据
  • 在8个数据集上生成数据,相似度与原数据接近
  • 适合需要隐私保护的数据合成场景

现有合成数据方法常因使用原始数据训练而面临成员推断攻击或数据重构风险。本文将合成数据生成视为引导式测试问题,提出一种混合方法:利用模糊测试生成样本,判别器基于原始数据评估样本质量,但不直接参与生成。该机制仅间接使用私有数据,通过演化过程生成符合原数据统计分布的合成数据,在8个基准数据集上验证表明,生成数据在平均效用和相似度方面表现良好,证明了结合经典生成与模型驱动判别的混合策略在生成高可用、隐私保护合成数据方面的潜力。

原文摘要 · Abstract (English)

There is a need for synthetic training and test datasets that replicate statistical distributions of original datasets without compromising their confidentiality. A lot of research has been done in leveraging Generative Adversarial Networks (GANs) for synthetic data generation, however the resulting models are either not accurate enough or are still vulnerable to membership inference attacks (MIA) or dataset reconstruction attacks since the original data has been leveraged in the training process. In this paper, we frame synthetic data generation as a guided test generation, or search-based testing problem rather than a purely generative modeling task. Ours is a search-based, adequacy-guided input generation technique inspired by GANs, with a generation step and a discrimination step; as in GAN, discrimination uses a discriminator model trained on the date, but instead of using models also for generation, we use a fuzzer. This way, the original (private) data is only indirectly leveraged in the generation process, and by evolving samples and determining "good samples" with the discriminator, we can generate privacy-preserving data that follows the same statistical distributions as the original dataset, leading to a similar utility as the original data. We evaluated our approach on eight datasets that have been used to evaluate the state-of-the-art techniques, finding that synthetic generated with our technique achieves good utility on average while also having good similarity scores, highlighting the potential of a mixed approach leveraging classical generation and model-driven discrimination for generating privacy-preserving, useful synthetic datasets.

数据合成隐私保护模糊测试生成模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。