Timezone: »

 
Randomized Response with Prior and Applications to Learning with Label Differential Privacy
Badih Ghazi · Noah Golowich · Ravi Kumar · Pasin Manurangsi · Chiyuan Zhang

@
in Theory and Practice of Differential Privacy »

The Randomized Response algorithm (RR) [Warner] is a classical technique to improve robustness in survey aggregation, and has been widely adopted in applications with differential privacy guarantees. We propose a novel algorithm, \emph{Randomized Response with Prior} (RRP), which can provide more accurate results while maintaining the same level of privacy guaranteed by RR. We then apply RRP to learn neural networks with \emph{label} differential privacy (LDP), and show that when only the label needs to be protected, the model performance can be significantly improved over the previous state-of-the-art private baselines. Moreover, we study different ways to obtain priors, which when used with RRP can additionally improve the model performance, further reducing the accuracy gap between private and non-private models. We complement the empirical results with theoretical analysis showing that LDP is provably easier than protecting both the inputs and labels.

Author Information

Badih Ghazi (Google)
Noah Golowich (Massachusetts Institute of Technology)
Ravi Kumar (Google)
Pasin Manurangsi (Google Research)
Chiyuan Zhang (Google Research)

More from the Same Authors