用公共数据二阶矩实现无界数据的差分隐私截断
Differentially Private Truncation of Unbounded Data via Public Second Moments
- 利用少量公开数据的二阶矩指导私有数据截断,提升隐私保护能力
- 在回归任务中显著改善差分隐私模型的准确率与稳定性
- 适合需保护隐私且数据无界的机器学习场景
数据隐私在人工智能时代至关重要,差分隐私(DP)是主流解决方案之一。然而,传统DP仅适用于有界分布的数据。本文提出基于公共二阶矩的截断方法(PMT),通过少量公开数据的二阶矩矩阵对私有数据进行变换,并依据非私有量(维度、样本量)确定截断半径。该变换使二阶矩矩阵条件数改善,显著增强其抵抗差分隐私噪声的能力。我们在惩罚和广义线性回归中验证了PMT的有效性,设计新损失函数与算法,确保变换空间解可映射回原始空间。理论分析表明,模型在误差界、鲁棒性和收敛性方面均有提升,归因于PMT的条件化效应。合成与真实数据集实验均显示,PMT显著提升了DP模型的精度与稳定性。
原文摘要 · Abstract (English)
Data privacy is important in the AI era, and differential privacy (DP) is one of the golden solutions. However, DP is typically applicable only if data have a bounded underlying distribution. We address this limitation by leveraging second-moment information from a small amount of public data. We propose Public-moment-guided Truncation (PMT), which transforms private data using the public second-moment matrix and applies a principled truncation whose radius depends only on non-private quantities: data dimension and sample size. This transformation yields a well-conditioned second-moment matrix, enabling its inversion with a significantly strengthened ability to resist the DP noise. Furthermore, we demonstrate the applicability of PMT by using penalized and generalized linear regressions. Specifically, we design new loss functions and algorithms, ensuring that solutions in the transformed space can be mapped back to the original domain. We have established improvements in the models' DP estimation through theoretical error bounds, robustness guarantees, and convergence results, attributing the gains to the conditioning effect of PMT. Experiments on synthetic and real datasets confirm that PMT substantially improves the accuracy and stability of DP models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。