SearcharxivSearch

arXiv subjects

Francisco

Publications and source records attributed to Francisco.

3 recordsLinked to original sources

Slant Submanifolds of Norden Manifolds

In this paper we introduce the notion of slant submanifolds of a Norden manifold. We study their first properties and present a whole gallery of examples.

math.DG

Can we infer the presence of Differential Privacy in Deep Learning models' weights? Towards more secure Deep Learning

Differential Privacy (DP) is a key property to protect data and models from integrity attacks. In the Deep Learning (DL) field, it is commonly implemented through the Differentially Private Stochastic Gradient Descent (DP-SGD). However, when a model is shared or released, there is no way to check whether it is differentially private, that is, it required to trust the model provider. This situation poses a problem when data privacy is mandatory, specially with current data regulations, as the presence of DP can not be certificated consistently by any third party. Thus, we face the challenge of determining whether a DL model has been trained with DP, according to the title question: Can we infer the presence of Differential Privacy in Deep Learning models' weights? Since the DP-SGD significantly changes the training process of a DL model, we hypothesize that DP leaves an imprint in the weights of a DL model, which can be used to predict whether a model has been trained with DP regardless of its architecture and the training dataset. In this paper, we propose to employ the imprint in model weights of using DP to infer the presence of DP training in a DL model. To substantiate our hypothesis, we developed an experimental methodology based on two datasets of weights of DL models, each with models with and without DP training and a meta-classifier to infer whether DP was used in the training process of a DL model, by accessing its weights. We accomplish both, the removal of the requirement of a trusted model provider and a strong foundation for this interesting line of research. Thus, our contribution is an additional layer of security on top of the strict private requirements of DP training in DL models, towards to DL models.

cs.LG

Disorder-safe entanglement transfer through ladder qubit chains

We study an entanglement transfer protocol in a two-leg ladder spin-1/2 chain in the presence of disorder. In the regime where on-site energies and the intrachain couplings follow aproximately constant proportions locally, we set up a scheme for high-fidelity state transfer via a disorder-protected subspace wherein fluctuations in the parameters do not depend on the global disorder of the system, accounted by $W$. Moreover, we find that the leakage of information from that subspace is actually suppressed upon increasing $W$ and thus the transfer fidelity, evaluated through the entanglement concurrence at the other end of the chain, builds up with the disorder strength.

quant-ph