首页|基于深度学习的动态差分隐私保护算法

基于深度学习的动态差分隐私保护算法

扫码查看
深度学习中使用的训练的数据集中可能存在一些用户的敏感信息,在模型训练过程中,这些敏感信息将会隐含地存在于模型参数中,从而存在隐私泄露的风险.本文在AdamP优化器的基础上引入高斯机制的差分隐私,提出了一种基于一次幂函数的动态隐私预算分配算法来更合理地分配差分隐私的隐私预算,即DP-AdamP,以更好地平衡隐私性和模型准确性.实验结果表明,本文的DP-AdamP算法相比于传统的DP-SGD算法,在相同隐私预算下具有更好的准确性,低隐私预算情况下高出约7.7%,高隐私预算情况下高出约3.9%,并且针对更具有实际意义的低隐私预算的情况进行单独实验,进一步验证了 DP-AdamP算法的有效性.
Dynamic Differential Privacy Preserving Algorithm Based on Deep Learning
There may be some sensitive information of users in the training dataset used in deep learning,and during the model training process,these sensitive information will implicitly exist in the model parameters,thus there is a risk of priva-cy leakage.In this paper,we introduce differential privacy of Gaussian mechanism on the basis of AdamP optimizer,and propose a dynamic privacy budget allocation algorithm based on primary power function to allocate the privacy budget of dif-ferential privacy more reasonably,i.e.DP-AdamP,so as to better balance the privacy and model accuracy.Experimental re-sults show that the DP-AdamP algorithm in this paper has better accuracy than the traditional DP-SGD algorithm under the same privacy budget,about 7.7%higher in the case of low privacy budget,and about 3.9%higher in the case of high priva-cy budget,and separate experiments are conducted for the more practically relevant case of low privacy budget,which fur-ther validates the effectiveness of the DP-AdamP algorithm.

deep learningdifferential privacyadaptive privacy budgetAdamP algorithm

何佳阳

展开 >

西安华为云计算技术有限公司,陕西西安 710119

深度学习 差分隐私 动态隐私预算 AdamP算法

2024

计算技术与自动化
湖南大学

计算技术与自动化

CSTPCD
影响因子:0.295
ISSN:1003-6199
年,卷(期):2024.43(4)