bounding user contributions a bias variance trade off in
play

Bounding User Contributions: A Bias-Variance Trade-off in - PowerPoint PPT Presentation

Bounding User Contributions: A Bias-Variance Trade-off in Differential Privacy Kareem Amin, Alex Kulesza, Andrs Muoz Medina, Sergei Vassilvitskii Google Research NY Typical DP assumption: Reality: One user = one example Users contribute


  1. Bounding User Contributions: A Bias-Variance Trade-off in Differential Privacy Kareem Amin, Alex Kulesza, Andrés Muñoz Medina, Sergei Vassilvitskii Google Research NY

  2. Typical DP assumption: Reality: One user = one example Users contribute many times

  3. High cap = excessive noise Low cap = biased data We investigate this bias-variance trade-off using tools from learning theory

  4. Setting Infinite collection of users • Distribution P over users • Each user has a unique distribution over examples • I.i.d. data: first sample a user from P , then sample the user’s distribution

  5. Learning • Cap each user at a 𝞾 0 fraction of the dataset • Run a standard differentially private ERM algorithm

  6. <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">ACw3icbVFba9swFJbdXbrslnaPexELA4dBsEthewdg8AG7WBJC1FmZEWORWTZlY4LQehP9q37NZNzKb0dEPr0ne87ks7JaikMxPFNEO49e/7i5f6rzus3b9+97x4cTkzVaMbHrJKVvsio4VIoPgYBkl/UmtMyk/w8W35v8+dXBtRqT+wqvmspAslcsEoeCrt/iMlhYJRaX+5qEjXJ13aWosr18dE8ktMhMpTW/gNjxy+p+93vuBTL8ohwsRcarCY5Joyu6szodpFo76zBGiTxg7AlosCvBOgkIOef21D1VItmZsLpjI7g13t65U/78exRt1P1badrtxYN4HfgxSLagh7ZxlnavybxiTckVMEmNmSZxDTNLNQgmueuQxvCasiVd8KmHipbczOx6Bg5/9swc5X2SwFes3cdlpbGrMrMK9vemIe5lnwqN20g/zazQtUNcMU2F+WNxFDhdqB4LjRnIFceUKaFfytmBfV9AT/2jm9C8vDLj8HkaJDEg+T3cW94sm3HPvqIPqEIJegrGqIROkNjxIJhkAdVUIc/wmWoQ9hIw2Dr+YDuRej+A0h/2hY=</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> Result Finite 0 1 s Bias due to Privacy noise ✓r ◆ ✓ ◆ Var( H ) 1 1 A + ˜ sample L ( h priv ) ≤ inf h ∈ H L ( h ) + O + O O @ capping variance K 2 ( τ 0 ) τ 0 n τ 0 variance

  7. <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> Result Finite 0 1 s Privacy noise ✓r ◆ ✓ ◆ Var( H ) 1 1 A + ˜ sample L ( h priv ) ≤ inf h ∈ H L ( h ) + O + O O @ variance K 2 ( τ 0 ) τ 0 n τ 0 variance Bias due to capping

  8. <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">ACw3icbVFba9swFJbdXbrslnaPexELA4dBsEthewdg8AG7WBJC1FmZEWORWTZlY4LQehP9q37NZNzKb0dEPr0ne87ks7JaikMxPFNEO49e/7i5f6rzus3b9+97x4cTkzVaMbHrJKVvsio4VIoPgYBkl/UmtMyk/w8W35v8+dXBtRqT+wqvmspAslcsEoeCrt/iMlhYJRaX+5qEjXJ13aWosr18dE8ktMhMpTW/gNjxy+p+93vuBTL8ohwsRcarCY5Joyu6szodpFo76zBGiTxg7AlosCvBOgkIOef21D1VItmZsLpjI7g13t65U/78exRt1P1badrtxYN4HfgxSLagh7ZxlnavybxiTckVMEmNmSZxDTNLNQgmueuQxvCasiVd8KmHipbczOx6Bg5/9swc5X2SwFes3cdlpbGrMrMK9vemIe5lnwqN20g/zazQtUNcMU2F+WNxFDhdqB4LjRnIFceUKaFfytmBfV9AT/2jm9C8vDLj8HkaJDEg+T3cW94sm3HPvqIPqEIJegrGqIROkNjxIJhkAdVUIc/wmWoQ9hIw2Dr+YDuRej+A0h/2hY=</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> Result 0 1 s Privacy noise ✓r ◆ ✓ ◆ Var( H ) 1 1 A + ˜ L ( h priv ) ≤ inf h ∈ H L ( h ) + O + O O @ variance K 2 ( τ 0 ) τ 0 n τ 0 Bias due to Finite capping sample variance

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend