揭示医疗影像差分隐私下的表征失真机制,定位性能下降根源。
Differential privacy representation geometry for medical image analysis
- 将差分隐私视为表征空间的结构化变换,分解性能损失为几何畸变与任务头利用不足。
- 在超59万张胸片上验证:即使线性可分性保持,仍存在显著任务利用差距。
- 发现隐私扰动重塑特征各向异性,而非均匀压缩,适用于模型选型与故障诊断。
差分隐私(DP)在医学影像中的影响通常仅通过端到端性能评估,导致隐私引发的效用损失机制不明确。本文提出差分隐私表征几何框架(DP-RGMI),将DP视为表征空间的结构化变换,并将性能退化分解为编码器几何变化与任务头利用不足。几何特性通过表征从初始化的位移及谱有效维度量化,利用度则通过线性探测与端到端性能的差距衡量。基于四个胸部X光数据集超过59.4万张图像及多种预训练初始化,结果表明:即使线性可分性基本保留,DP始终伴随利用差距。同时,位移与谱维度呈现非单调、依赖初始化和数据集的重分布特征,说明DP改变表征各向异性而非均匀坍缩。相关性分析显示,端到端性能与利用度的关联在不同数据集间稳健,但受初始化影响;而几何量能捕捉先验与数据集相关的额外变异。该研究为诊断隐私导致的失效模式提供了可复现的分析框架,有助于指导隐私模型选择。
原文摘要 · Abstract (English)
Differential privacy (DP)'s effect in medical imaging is typically evaluated only through end-to-end performance, leaving the mechanism of privacy-induced utility loss unclear. We introduce Differential Privacy Representation Geometry for Medical Imaging (DP-RGMI), a framework that interprets DP as a structured transformation of representation space and decomposes performance degradation into encoder geometry and task-head utilization. Geometry is quantified by representation displacement from initialization and spectral effective dimension, while utilization is measured as the gap between linear-probe and end-to-end utility. Across over 594,000 images from four chest X-ray datasets and multiple pretrained initializations, we show that DP is consistently associated with a utilization gap even when linear separability is largely preserved. At the same time, displacement and spectral dimension exhibit non-monotonic, initialization- and dataset-dependent reshaping, indicating that DP alters representation anisotropy rather than uniformly collapsing features. Correlation analysis reveals that the association between end-to-end performance and utilization is robust across datasets but can vary by initialization, while geometric quantities capture additional prior- and dataset-conditioned variation. These findings position DP-RGMI as a reproducible framework for diagnosing privacy-induced failure modes and informing privacy model selection.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。