DiPSeN: Differentially Private Self-normalizing Neural Networks For Adversarial Robustness in Federated Learning

2021-01-08 · Olakunle Ibitoye, M. Omair Shafiq, Ashraf Matrawy

The need for robust, secure and private machine learning is an important goal for realizing the full potential of the Internet of Things (IoT). Federated learning has proven to help protect against privacy violations and information leakage. However, it introduces new risk vectors which make machine learning models more difficult to defend against adversarial samples. In this study, we examine the role of differential privacy and self-normalization in mitigating the risk of adversarial samples specifically in a federated learning environment. We introduce DiPSeN, a Differentially Private Self-normalizing Neural Network which combines elements of differential privacy noise with self-normalizing techniques. Our empirical results on three publicly available datasets show that DiPSeN successfully improves the adversarial robustness of a deep learning classifier in a federated learning environment based on several evaluation metrics.

📄 PDF Abstract BibTeX arXiv:2101.03218

Code (0)

등록된 구현이 없습니다.

Tasks

Adversarial Robustness BIG-bench Machine Learning Federated Learning

Differentially Private Normalizing Flows for Privacy-Preserving Density Estimation

2021-03-25 · Chris Waites, Rachel Cummings

Normalizing flow models have risen as a popular solution to the problem of density estimation, enabling high-quality synthetic data generation as well as exact probability density evaluation. However, in contexts where i…

Anomaly Detection Density Estimation Privacy Preserving Synthetic Data Generation

Differentially Private Normalizing Flows for Density Estimation, Data Synthesis, and Variational Inference with Application to Electronic Health Records

2023-02-11 · Bingyue Su, Yu Wang, Daniele E. Schiavazzi, Fang Liu

Electronic health records (EHR) often contain sensitive medical information about individual patients, posing significant limitations to sharing or releasing EHR data for downstream learning and inferential tasks. We use…

Density Estimation Privacy Preserving Variational Inference

A self-attention-based differentially private tabular GAN with high data utility

2023-12-20 · Zijian Li, Zhihui Wang

Generative Adversarial Networks (GANs) have become a ubiquitous technology for data generation, with their prowess in image generation being well-established. However, their application in generating tabular data has bee…

Generative Adversarial Network Image Generation Tabular Data Generation

Differentially Private and Adversarially Robust Machine Learning: An Empirical Evaluation

2024-01-18 · Janvi Thakkar, Giulio Zizzo, Sergio Maffeis

Malicious adversaries can attack machine learning models to infer sensitive information or damage the system by launching a series of evasion attacks. Although various work addresses privacy and security concerns, they f…

Inference Attack Membership Inference Attack

Learning to be adversarially robust and differentially private

2022-01-06 · Jamie Hayes, Borja Balle, M. Pawan Kumar

We study the difficulties in learning that arise from robust and differentially private optimization. We first study convergence of gradient descent based adversarial training with differential privacy, taking a simple b…

Binary Classification