PAC learning with stable and private predictions
Not on the map. Why?
Abstract (arXiv)
We study binary classification algorithms for which the prediction on any point is not too sensitive to individual examples in the dataset. Specifically, we consider the notions of uniform stability (Bousquet and Elisseeff, 2001) and prediction privacy (Dwork and Feldman, 2018). Previous work on these notions shows how they can be achieved in the standard PAC model via simple aggregation of models trained on disjoint subsets of data. Unfortunately, this approach leads to a significant overhead in terms of sample complexity. Here we demonstrate several general approaches to stable and private prediction that either eliminate or significantly reduce the overhead. Specifically, we demonstrate that for any class C of VC dimension d there exists a γ-uniformly stable algorithm for learning C with excess error α using tilde O(d/(αγ) + d/α2) samples. We also show that this bound is nearly tight. For ε-differentially private prediction we give two new algorithms: one using tilde O(d/(α2ε)) samples and another one using tilde O(d2/(αε) + d/α2) samples. The best previously known bounds for these problems are O(d/(α2γ)) and O(d/(α3ε)), respectively.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 1; 2022: 1; 2023: 3; 2024: 1; 2025: 3.
9 papers.
- 2022Differentially Private Decoding in Large Language Modelscited by 34
- 2023Integration of Large Language Models and Federated Learningcited by 28
- 2021Realizable Learning is All You Needcited by 25
- 2023Private Everlasting Predictioncited by 5
- 2023"Private Prediction Strikes Back!'' Private Kernelized Nearest Neighbors with Individual Renyi Filtercited by 5
- 2024Private Truly-Everlasting Robust-Predictioncited by 2
- 2025KL-regularization Itself is Differentially Private in Bandits and RLHFcited by 2
- 2025Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomnesscited by 2
- 2025Private Realizable-to-Agnostic Transformation with Near-Optimal Sample Complexitycited by 1
- 2025Private Realizable-to-Agnostic Transformation with Near-Optimal Sample Complexity1 Oct 2025
- 2025Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomness3 Jun 2025
- 2025KL-regularization Itself is Differentially Private in Bandits and RLHF23 May 2025
- 2024Private Truly-Everlasting Robust-Prediction9 Jan 2024
- 2023Integration of Large Language Models and Federated Learning18 Jul 2023
- 2023"Private Prediction Strikes Back!'' Private Kernelized Nearest Neighbors with Individual Renyi Filter12 Jun 2023
- 2023Private Everlasting Prediction16 May 2023
- 2022Differentially Private Decoding in Large Language Models26 May 2022
- 2021Realizable Learning is All You Need8 Nov 2021