mlsanityData to 7 Oct 2026

DP-CDA: An Algorithm for Enhanced Privacy Preservation in Dataset Synthesis Through Randomized Mixing

arXiv 2411.16121 ↗First posted 25 Nov 2024stat.ML cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

In recent years, the growth of data across various sectors, including healthcare, security, finance, and education, has created significant opportunities for analysis and informed decision-making. However, these datasets often contain sensitive and personal information, which raises serious privacy concerns. It has been shown in multiple works that a person's identity is intertwined with their data, even if the data is anonymized. Due to this lack of separation between a person's identity and their information, the patterns associated with an individual's information can uniquely identify them. Protecting individual privacy is crucial, yet many existing machine learning and data publishing algorithms struggle with high-dimensional data, facing challenges related to the trade-off between computational efficiency and privacy. To address these challenges, we introduce an effective data publishing algorithm DP-CDA. Our proposed algorithm generates synthetic data by randomly mixing the privacy-sensitive data in a class-specific manner and inducing carefully tuned randomness to ensure formal privacy guarantees. Our comprehensive privacy accounting shows that the proposed DP-CDA provides a stronger privacy guarantee compared to existing methods, allowing for better utility while maintaining a stricter level of privacy. To evaluate the effectiveness of DP-CDA, we examine the accuracy of predictive models trained on the synthetic data, which serves as a measure of dataset utility. Importantly, we identify an optimal order of mixing that balances privacy-utility trade-off. Our results indicate that synthetic datasets produced using the DP-CDA can achieve superior utility compared to those generated by conventional data publishing algorithms, even when subject to the same privacy requirements.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 20 of its 59 references that are in the map. First posted on arXiv 25 Nov 2024.

Builds on

20 of 59 references.

References · 20

  1. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
  2. 2016Deep Learning with Differential Privacycited by 2,682
  3. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  4. 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
  5. 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 234
  6. 2020GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generatorscited by 117
  7. 2018Data Augmentation by Pairing Samples for Images Classificationcited by 96
  8. 2020DP-MERF: Differentially Private Mean Embeddings with Random Features for Practical Privacy-Preserving Data Generationcited by 78
  9. 2021Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergencecited by 54
  10. 2017Learning from Between-class Examples for Deep Sound Recognitioncited by 53
  11. 2019G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminatorscited by 53
  12. 2017Between-class Learning for Image Classificationcited by 50
8 more
  1. 2017The Price of Differential Privacy For Online Learningcited by 44
  2. 2017Straggler Mitigation in Distributed Optimization Through Data Encodingcited by 26
  3. 2017Differentially Private Empirical Risk Minimization with Input Perturbationcited by 19
  4. 2017Collect at Once, Use Effectively: Making Non-interactive Locally Private Learning Possiblecited by 12
  5. 2023Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Surveycited by 12
  6. 2017Differentially Private Learning of Undirected Graphical Models using Collective Graphical Modelscited by 6
  7. 2017On the Protection of Private Information in Machine Learning Systems: Two Recent Approachescited by 4
  8. 2022Privacy-preserving Non-negative Matrix Factorization with Outlierscited by 2

Built on by

Cited by year

Citing papers per year: 2025: 1.

1 paper.