Enforcing Privacy in Distributed Learning with Performance Guarantees
Rizk, Elsa, Vlaski, Stefan, Sayed, Ali H.
–arXiv.org Artificial Intelligence
We study the privatization of distributed learning and optimization strategies. We focus on differential privacy schemes and study their effect on performance. We show that the popular additive random perturbation scheme degrades performance because it is not well-tuned to the graph structure. For this reason, we exploit two alternative graph-homomorphic constructions and show that they improve performance while guaranteeing privacy. Moreover, contrary to most earlier studies, the gradient of the risks is not assumed to be bounded (a condition that rarely holds in practice; e.g., quadratic risk). We avoid this condition and still devise a differentially private scheme with high probability. We examine optimization and learning scenarios and illustrate the theoretical findings through simulations.
arXiv.org Artificial Intelligence
Jan-16-2023
- Country:
- North America
- United States
- New York > New York County
- New York City (0.04)
- California
- San Francisco County > San Francisco (0.14)
- Santa Clara County > San Jose (0.04)
- New York > New York County
- Mexico > Quintana Roo
- Cancún (0.04)
- Canada
- Quebec > Montreal (0.04)
- Ontario > Toronto (0.04)
- British Columbia > Metro Vancouver Regional District
- Vancouver (0.04)
- United States
- Europe
- Greece (0.04)
- United Kingdom > England
- Cambridgeshire > Cambridge (0.04)
- Switzerland > Vaud
- Lausanne (0.04)
- Asia > Middle East
- Jordan (0.04)
- Africa > Ethiopia
- Addis Ababa > Addis Ababa (0.04)
- North America
- Genre:
- Research Report (0.64)
- Industry:
- Information Technology > Security & Privacy (1.00)
- Education (0.67)
- Technology:
- Information Technology
- Security & Privacy (1.00)
- Data Science > Data Mining (0.68)
- Communications (0.67)
- Artificial Intelligence
- Representation & Reasoning > Agents (0.93)
- Machine Learning > Statistical Learning (0.68)
- Information Technology