Informationally Compressive Anonymization: Non-Degrading Sensitive Input Protection for Privacy-Preserving Supervised Machine Learning
Not on the map. Why?
Abstract (arXiv)
Modern machine learning systems increasingly rely on sensitive data, creating significant privacy, security, and regulatory risks that existing privacy-preserving machine learning (ppML) techniques, such as Differential Privacy (DP) and Homomorphic Encryption (HE), address only at the cost of degraded performance, increased complexity, or prohibitive computational overhead. This paper introduces Informationally Compressive Anonymization (ICA) and the VEIL architecture, a privacy-preserving ML framework that achieves strong privacy guarantees through architectural and mathematical design rather than noise injection or cryptography. ICA embeds a supervised, multi-objective encoder within a trusted Source Environment to transform raw inputs into low-dimensional, task-aligned latent representations, ensuring that only irreversibly anonymized vectors are exported to untrusted training and inference environments. The paper rigorously proves that these encodings are structurally non-invertible using topological and information-theoretic arguments, showing that inversion is logically impossible, even under idealized attacker assumptions, and that, in realistic deployments, the attacker conditional entropy over the original data diverges, driving reconstruction probability to zero. Unlike prior autoencoder-based ppML approaches, ICA preserves predictive utility by aligning representation learning with downstream supervised objectives, enabling low-latency, high-performance ML without gradient clipping, noise budgets, or encryption at inference time. The VEIL architecture enforces strict trust boundaries, supports scalable multi-region deployment, and naturally aligns with privacy-by-design regulatory frameworks, establishing a new foundation for enterprise ML that is secure, performant, and safe by construction, even in the face of post-quantum threats.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 41 of its 95 references that are in the map. First posted on arXiv 16 Mar 2026.
Builds on
41 of 95 references.
References · 41
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,662
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,120
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2017Axiomatic Attribution for Deep Networkscited by 3,350
- 2016Deep Learning with Differential Privacycited by 2,682
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2017SmoothGrad: removing noise by adding noisecited by 1,097
- 2019Deep Leakage from Gradientscited by 1,004
- 2016Practical Black-Box Attacks against Machine Learningcited by 893
- 2015Deep Learning and the Information Bottleneck Principlecited by 793
29 more
- 2016Stealing Machine Learning Models via Prediction APIscited by 602
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 285
- 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 208
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 208
- 2023Text Embeddings Reveal (Almost) As Much As Textcited by 189
- 2020A Survey of Privacy Attacks in Machine Learningcited by 143
- 2019What Clinicians Want: Contextualizing Explainable Machine Learning for Clinical End Usecited by 134
- 2021Dirichlet Energy Constrained Learning for Deep Graph Neural Networkscited by 97
- 2018Exploring Connections Between Active Learning and Model Extractioncited by 84
- 2021EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learningcited by 68
- 2020Neither Private Nor Fair: Impact of Data Imbalance on Utility and Fairness in Differential Privacycited by 61
- 2018Low Latency Privacy Preserving Inferencecited by 57
- 2022Are Attribute Inference Attacks Just Imputation?cited by 48
- 2019Multi-level Convolutional Autoencoder Networks for Parametric Prediction of Spatio-temporal Dynamicscited by 45
- 2019An Alternative Probabilistic Interpretation of the Huber Losscited by 43
- 2020Chasing Your Long Tails: Differentially Private Prediction in Health Care Settingscited by 37
- 2019Adversarial Learning of Privacy-Preserving and Task-Oriented Representationscited by 35
- 2019An Introductory Guide to Fano's Inequality with Applications in Statistical Estimationcited by 30
- 2024Embedding-based classifiers can detect prompt injection attackscited by 24
- 2024Differential Privacy Under Class Imbalance: Methods and Empirical Insightscited by 6
- 2024Data Reconstruction Attacks and Defenses: A Systematic Evaluationcited by 5
- 2025Geometric Machine Learning on EEG Signalscited by 3
- 2022Privacy-Preserving Machine Learning for Collaborative Data Sharing via Auto-encoder Latent Space Embeddingscited by 2
- 2023Robust Representation Learning for Privacy-Preserving Machine Learning: A Multi-Objective Autoencoder Approachcited by 2
- 2024Poisoning with A Pill: Circumventing Detection in Federated Learningcited by 2
- 2025Investigating the Invertibility of Multimodal Latent Spaces: Limitations of Optimization-Based Methodscited by 1
Built on by
Not cited yet.