Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy
Not on the map. Why?
Abstract (arXiv)
While Local Differential Privacy (LDP) serves as a foundational primitive for distributed data collection, its stringent randomization requirements often lead to severe degradation in data representation utility. This degradation stems from the task-agnostic nature of conventional LDP mechanisms, which perturb all dimensions without accounting for their relative importance to the downstream objective. To address this issue, we propose a novel approach that mitigates noise in task-relevant subspaces of the data representation. Our method identifies task-critical subspaces via the Jacobian of a public downstream model, selectively attenuates noise along these directions, and reshapes the isotropic noise of standard LDP mechanisms into an anisotropic distribution. The resulting mechanism preserves the privacy guarantee of the underlying LDP randomizer while heterogeneously modulating the impact of noise across task directions, thereby substantially enhancing data utility. The approach is applicable to both linear and nonlinear models and can be seamlessly integrated with existing LDP mechanisms. Extensive experiments on CIFAR-10-C under brightness corruption at the highest severity level demonstrate that integrating our approach improves classification accuracy by approximately 8 percentage points for Laplace and 20 percentage points for PrivUnit variants at ε=7.5. The source code is available at https://github.com/ymha/jacobian-anr-ldp.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 31 of its 54 references that are in the map. First posted on arXiv 16 May 2026.
Builds on
31 of 54 references.
References · 31
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2020Intrinsic Dimensionality Explains the Effectiveness of Language Model Fine-Tuningcited by 671
- 2018Measuring the Intrinsic Dimension of Objective Landscapescited by 370
- 2014RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Responsecited by 272
- 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 218
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 164
- 2017Collecting Telemetry Data Privatelycited by 149
- 2018Protection Against Reconstruction and Its Applications in Private Federated Learningcited by 130
- 2018Distributed Differential Privacy via Shufflingcited by 115
- 2016Minimax Optimal Procedures for Locally Private Estimationcited by 107
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
19 more
- 2020Locally Private Graph Neural Networkscited by 64
- 2016Discrete Distribution Estimation under Local Privacycited by 59
- 2019Collecting and Analyzing Multidimensional Data with Local Differential Privacycited by 49
- 2021Instance-optimal Mean Estimation Under Differential Privacycited by 37
- 2022Optimal Algorithms for Mean Estimation under Local Differential Privacycited by 36
- 2017Adaptive Laplace Mechanism: Differential Privacy Preservation in Deep Learningcited by 34
- 2015Heterogeneous Differential Privacycited by 30
- 2022Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacycited by 29
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2025Privacy amplification by random allocationcited by 15
- 2018Answering Range Queries Under Local Differential Privacycited by 12
- 2019Locally Differentially Private Frequency Estimation with Consistencycited by 12
- 2023PLAN: Variance-Aware Private Mean Estimationcited by 6
- 2024Dimension-free Private Mean Estimation for Anisotropic Distributionscited by 6
- 2021Task-aware Privacy Preservation for Multi-dimensional Datacited by 5
- 2018Calibrate: Frequency Estimation and Heavy Hitter Identification with Local Differential Privacy via Incorporating Prior Knowledgecited by 4
- 2022Utility Analysis and Enhancement of LDP Mechanisms in High-Dimensional Spacecited by 3
- 2023Differential Privacy with Higher Utility by Exploiting Coordinate-wise Disparity: Laplace Mechanism Can Beat Gaussian in High Dimensionscited by 3
- 2025Augmented Shuffle Protocols for Accurate and Robust Frequency Estimation under Differential Privacycited by 2
Built on by
Not cited yet.