arXiv · 2306.03962
PILLAR: How to make semi-private learning more effective
Abstract
In Semi-Supervised Semi-Private (SP) learning, the learner has access to both public unlabelled and private labelled data. We propose a computationally efficient algorithm that, under mild assumptions on the data, provably achieves significantly lower private labelled sample complexity and can be efficiently run on real-world datasets. For this purpose, we leverage the features extracted by networks pre-trained on public (labelled or unlabelled) data, whose distribution can significantly differ from the one on which SP learning is performed. To validate its empirical effectiveness, we propose a wide variety of experiments under tight privacy constraints ($\epsilon = 0.1$) and with a focus on low-data regimes. In all of these settings, our algorithm exhibits significantly improved performance over available baselines that use similar amounts of public data.
Explore related subjects
Keep this discovery
Explore connections, maps & timelines
Francesco Pinto, Yaxi Hu, Fanny Yang, Amartya Sanyal. 2023-06-06. PILLAR: How to make semi-private learning more effective. https://arxiv.org/abs/2306.03962
Cite the original work for its findings. Save a collection to share your selection of sources.