通过后处理提升合成表格数据的隐私性与实用性。
Generating High-quality Privacy-preserving Synthetic Data
- 先修复缺失类别,再用最近邻过滤去除过近的合成样本。
- 分类分布偏差降低36%,依赖关系保留度提升10%~14%。
- 适合关注数据隐私与真实性的研究人员使用。
合成表格数据可实现敏感记录的安全共享与分析,但其实际应用需在分布保真度、下游效用和隐私保护间取得平衡。本文提出一种简单、模型无关的后处理框架,可应用于任意合成数据生成器以优化该权衡。首先,通过模式修补修复合成数据中缺失或严重不足的类别,同时基本保留已学习的依赖关系;其次,采用k近邻过滤移除与真实样本距离过近的合成记录,强制真实与合成样本间保持最小距离。该框架在两种神经生成模型(前馈生成器与变分自编码器)上实现,并在三个公开数据集(信用卡交易、心血管健康、基于人口普查的收入)上评估。结果表明,在0.2至0.35的适度阈值下,合成数据与真实数据的分类分布差异最多减少36%,联合依赖关系保真度提升10%~14%,下游预测性能仅比原始基线下降约1%。同时,基于距离的隐私指标改善,属性推断攻击成功率基本不变。研究为合成数据后处理提供实用指导,可补充形式化差分隐私方法。
原文摘要 · Abstract (English)
Synthetic tabular data enables sharing and analysis of sensitive records, but its practical deployment requires balancing distributional fidelity, downstream utility, and privacy protection. We study a simple, model agnostic post processing framework that can be applied on top of any synthetic data generator to improve this trade off. First, a mode patching step repairs categories that are missing or severely underrepresented in the synthetic data, while largely preserving learned dependencies. Second, a k nearest neighbor filter replaces synthetic records that lie too close to real data points, enforcing a minimum distance between real and synthetic samples. We instantiate this framework for two neural generative models for tabular data, a feed forward generator and a variational autoencoder, and evaluate it on three public datasets covering credit card transactions, cardiovascular health, and census based income. We assess marginal and joint distributional similarity, the performance of models trained on synthetic data and evaluated on real data, and several empirical privacy indicators, including nearest neighbor distances and attribute inference attacks. With moderate thresholds between 0.2 and 0.35, the post processing reduces divergence between real and synthetic categorical distributions by up to 36 percent and improves a combined measure of pairwise dependence preservation by 10 to 14 percent, while keeping downstream predictive performance within about 1 percent of the unprocessed baseline. At the same time, distance based privacy indicators improve and the success rate of attribute inference attacks remains largely unchanged. These results provide practical guidance for selecting thresholds and applying post hoc repairs to improve the quality and empirical privacy of synthetic tabular data, while complementing approaches that provide formal differential privacy guarantees.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。