Timezone: »

 
Poster
Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano
Chuan Guo · Alexandre Sablayrolles · Maziar Sanjabi

Thu Jul 27 01:30 PM -- 03:00 PM (PDT) @ Exhibit Hall 1 #331
in Poster Session 5 »
Differential privacy (DP) is by far the most widely accepted framework for mitigating privacy risks in machine learning. However, exactly how small the privacy parameter $\epsilon$ needs to be to protect against certain privacy risks in practice is still not well-understood. In this work, we study data reconstruction attacks for discrete data and analyze it under the framework of multiple hypothesis testing. For a learning algorithm satisfying $(\alpha, \epsilon)$-Renyi DP, we utilize different variants of the celebrated Fano's inequality to upper bound the attack advantage of a data reconstruction adversary. Our bound can be numerically computed to relate the parameter $\epsilon$ to the desired level of privacy protection in practice, and complements the empirical evidence for the effectiveness of DP against data reconstruction attacks even at relatively large values of $\epsilon$.
[ PDF]  [ Poster] 

Author Information

Chuan Guo (Meta AI)
Alexandre Sablayrolles (Facebook AI)
Maziar Sanjabi (Meta AI)

More from the Same Authors