Tiny, Hardware-Independent, Compression-based Classification
Not on the map. Why?
Abstract (arXiv)
The recent developments in machine learning have highlighted a conflict between online platforms and their users in terms of privacy. The importance of user privacy and the struggle for power over user data has been intensified as regulators and operators attempt to police online platforms. As users have become increasingly aware of privacy issues, client-side data storage, management, and analysis have become a favoured approach to large-scale centralised machine learning. However, state-of-the-art machine learning methods require vast amounts of labelled user data, making them unsuitable for models that reside client-side and only have access to a single user's data. State-of-the-art methods are also computationally expensive, which degrades the user experience on compute-limited hardware and also reduces battery life. A recent alternative approach has proven remarkably successful in classification tasks across a wide variety of data -- using a compression-based distance measure (called normalised compression distance) to measure the distance between generic objects in classical distance-based machine learning methods. In this work, we demonstrate that the normalised compression distance is actually not a metric; develop it for the wider context of kernel methods to allow modelling of complex data; and present techniques to improve the training time of models that use this distance measure. We demonstrate that the normalised compression distance works as well as and sometimes better than other metrics and kernels -- while requiring only marginally more computational costs and in spite of the lack of formal metric properties. The end results is a simple model with remarkable accuracy even when trained on a very small number of samples allowing for models that are small and effective enough to run entirely on a client device using only user-supplied data.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 16 of its 54 references that are in the map. First posted on arXiv 6 Mar 2026.
Builds on
16 of 54 references.
References · 16
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2014SAGA: A Fast Incremental Gradient Method With Support for Non-Strongly Convex Composite Objectivescited by 401
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 208
- 2016Imbalanced-learn: A Python Toolbox to Tackle the Curse of Imbalanced Datasets in Machine Learningcited by 193
- 2020Membership Leakage in Label-Only Exposurescited by 156
- 2021Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratchcited by 98
- 2018Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Datacited by 69
- 2019Bypassing Backdoor Detection Algorithms in Deep Learningcited by 69
- 2020Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influencecited by 27
- 2020Quantifying Membership Inference Vulnerability via Generalization Gap and Other Model Metricscited by 13
- 2021The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Modelscited by 12
4 more
- 2022Less is More: Parameter-Free Text Classification with Gzipcited by 7
- 2023Gzip versus bag-of-words for text classificationcited by 2
- 2024A Strong Inductive Bias: Gzip for binary image classificationcited by 1
- 2024A Training Rate and Survival Heuristic for Inference and Robustness Evaluation (TRASHFIRE)cited by 1
Built on by
Not cited yet.