Anonymous Learning via Look-Alike Clustering: A Precise Analysis of Model Generalization
Adel Javanmard, Vahab Mirrokni
摘要
While personalized recommendations systems have become increasingly popular, ensuring user data protection remains a top concern in the development of these learning systems. A common approach to enhancing privacy involves training models using anonymous data rather than individual data. In this paper, we explore a natural technique called look-alike clustering, which involves replacing sensitive features of individuals with the cluster's average values. We provide a precise analysis of how training models using anonymous cluster centers affects their generalization capabilities. We focus on an asymptotic regime where the size of the training set grows in proportion to the features dimension. Our analysis is based on the Convex Gaussian Minimax Theorem (CGMT) and allows us to theoretically understand the role of different model components on the generalization error. In addition, we demonstrate that in certain high-dimensional regimes, training over anonymous cluster centers acts as a regularization and improves generalization error of the trained models. Finally, we corroborate our asymptotic theory with finite-sample numerical experiments where we observe a perfect match when the sample size is only of order of a few hundreds.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
它引用的顶会 Paper7
- What Neural Networks Memorize and Why: Discovering the Long Tail via Influence EstimationVitaly Feldman, Chiyuan ZhangNeurIPS 2020 · 被引用 674 次
- Overlearning Reveals Sensitive AttributesCongzheng Song, Vitaly ShmatikovICLR 2020 · 被引用 177 次
- Identity Crisis: Memorization and Generalization Under Extreme OverparameterizationChiyuan Zhang, Samy Bengio, Moritz Hardt, Michael C. Mozer 等ICLR 2020 · 被引用 96 次
- When is memorization of irrelevant training data necessary for high-accuracy learning?Gavin Brown, Mark Bun, Vitaly Feldman, Adam D. Smith 等STOC 2021 · 被引用 33 次
- Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' OutputsMohammad Malekzadeh, Anastasia Borovykh, Deniz GündüzCCS 2021 · 被引用 32 次
相关 Paper
- Differentially Private Model PersonalizationPrateek Jain, John Rush, Adam D. Smith, Shuang Song 等NeurIPS 2021 · 被引用 42 次
- Task-level Differentially Private Meta LearningXinyu Zhou, Raef BassilyNeurIPS 2022 · 被引用 11 次
- The Privacy Onion Effect: Memorization is RelativeNicholas Carlini, Matthew Jagielski, Chiyuan Zhang, Nicolas Papernot 等NeurIPS 2022 · 被引用 175 次
- Does learning require memorization? a short tale about a long tailVitaly FeldmanSTOC 2020 · 被引用 28 次
- Characterization of Gaussian Universality Breakdown in High-Dimensional Empirical Risk MinimizationMohamed Chiheb Yaakoubi, Cosme Louart, Malik TIOMOKO, Zhenyu LiaoICML 2026
