Anonymous Learning via Look-Alike Clustering: A Precise Analysis of Model Generalization
Adel Javanmard, Vahab Mirrokni
Abstract
While personalized recommendations systems have become increasingly popular, ensuring user data protection remains a top concern in the development of these learning systems. A common approach to enhancing privacy involves training models using anonymous data rather than individual data. In this paper, we explore a natural technique called look-alike clustering, which involves replacing sensitive features of individuals with the cluster's average values. We provide a precise analysis of how training models using anonymous cluster centers affects their generalization capabilities. We focus on an asymptotic regime where the size of the training set grows in proportion to the features dimension. Our analysis is based on the Convex Gaussian Minimax Theorem (CGMT) and allows us to theoretically understand the role of different model components on the generalization error. In addition, we demonstrate that in certain high-dimensional regimes, training over anonymous cluster centers acts as a regularization and improves generalization error of the trained models. Finally, we corroborate our asymptotic theory with finite-sample numerical experiments where we observe a perfect match when the sample size is only of order of a few hundreds.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Builds on7
- What Neural Networks Memorize and Why: Discovering the Long Tail via Influence EstimationVitaly Feldman, Chiyuan ZhangNeurIPS 2020 · 674 citations
- Overlearning Reveals Sensitive AttributesCongzheng Song, Vitaly ShmatikovICLR 2020 · 177 citations
- Identity Crisis: Memorization and Generalization Under Extreme OverparameterizationChiyuan Zhang, Samy Bengio, Moritz Hardt, Michael C. Mozer et al.ICLR 2020 · 96 citations
- When is memorization of irrelevant training data necessary for high-accuracy learning?Gavin Brown, Mark Bun, Vitaly Feldman, Adam D. Smith et al.STOC 2021 · 33 citations
- Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' OutputsMohammad Malekzadeh, Anastasia Borovykh, Deniz GündüzCCS 2021 · 32 citations
Related papers
- Differentially Private Model PersonalizationPrateek Jain, John Rush, Adam D. Smith, Shuang Song et al.NeurIPS 2021 · 42 citations
- Task-level Differentially Private Meta LearningXinyu Zhou, Raef BassilyNeurIPS 2022 · 11 citations
- The Privacy Onion Effect: Memorization is RelativeNicholas Carlini, Matthew Jagielski, Chiyuan Zhang, Nicolas Papernot et al.NeurIPS 2022 · 175 citations
- Does learning require memorization? a short tale about a long tailVitaly FeldmanSTOC 2020 · 28 citations
- Characterization of Gaussian Universality Breakdown in High-Dimensional Empirical Risk MinimizationMohamed Chiheb Yaakoubi, Cosme Louart, Malik TIOMOKO, Zhenyu LiaoICML 2026
