Goto

Collaborating Authors

 Banff







DP-Mix: Mixup-based Data Augmentation for Differentially Private Learning

Neural Information Processing Systems

In this paper, we investigate why naive applications of multi-sample data augmentation techniques, such as mixup, fail to achieve good performance and propose two novel data augmentation techniques specifically designed for the constraints of differentially private learning.



7bab7650be60b0738e22c3b8745f937d-Paper.pdf

Neural Information Processing Systems

In contrast to regularizationbased approaches, we formulate the adversarially robust learning problem as one of loss minimization with a Lipschitz constraint, and show that the saddle point of the associated Lagrangian is characterized by a Poisson equation with weighted Laplace operator. Further, the weighting for the Laplace operator is given by the Lagrange multiplier for the Lipschitz constraint, which modulates the sensitivity of the minimizer to perturbations.