Auditing -differential privacy in one run
Saeed Mahloujifar, Luca Melis, Kamalika Chaudhuri
摘要
Empirical auditing has emerged as a means of catching some of the flaws in the implementation of privacy-preserving algorithms. Existing auditing mechanisms, however, are either computationally inefficient -requiring multiple runs of the machine learning algorithms --or suboptimal in calculating an empirical privacy. In this work, we present a tight and efficient auditing procedure and analysis that can effectively assess the privacy of mechanisms. Our approach is efficient; similar to the recent work of Steinke, Nasr, and Jagielski (2023), our auditing procedure leverages the randomness of examples in the input dataset and requires only a single run of the target mechanism. And it is more accurate; we provide a novel analysis that enables us to achieve tight empirical privacy estimates by using the hypothesized f -DP curve of the mechanism, which provides a more accurate measure of privacy than the traditional ϵ, δ differential privacy parameters. We use our auditing procure and analysis to obtain empirical privacy, demonstrating that our auditing procedure delivers tighter privacy estimates.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper13
- To Shuffle or not to Shuffle: Auditing DP-SGD with ShufflingMeenatchi Sundaram Muthu Selva Annamalai, Borja Balle, Jamie Hayes, Emiliano De CristofaroNDSS 2026 · 被引用 11 次
- How Well Can Differential Privacy Be Audited in One Run?Amit Keinan, Moshe Shenfeld, Katrina LigettNeurIPS 2025 · 被引用 10 次
- Benchmarking Empirical Privacy Protection for Adaptations of Large Language ModelsBartlomiej Marek, Lorenzo Rossi, Vincent Hanke, Xun Wang 等ICLR 2026 · 被引用 8 次
- Optimizing Canaries for Privacy Auditing with Metagradient DescentMatteo Boglioni, Terrance Liu, Andrew Ilyas, Steven WuICLR 2026 · 被引用 7 次
- Sequentially Auditing Differential PrivacyTomás González Lara, Mateo Dulce-Rubio, Aaditya Ramdas, Mónica RiberoNeurIPS 2025 · 被引用 6 次
它引用的顶会 Paper31
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan 等CCS 2016 · 被引用 7,620 次
- Membership Inference Attacks Against Machine Learning ModelsReza Shokri, Marco Stronati, Congzheng Song, Vitaly ShmatikovS&P 2017 · 被引用 5,137 次
- Membership Inference Attacks From First PrinciplesNicholas Carlini, Steve Chien, Milad Nasr, Shuang Song 等S&P 2022 · 被引用 1,049 次
- Machine Learning with Membership Privacy using Adversarial RegularizationMilad Nasr, Reza Shokri, Amir HoumansadrCCS 2018 · 被引用 543 次
- MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial ExamplesJinyuan Jia, Ahmed Salem, Michael Backes, Yang Zhang 等CCS 2019 · 被引用 464 次
相关 Paper
- General-Purpose f-DP Estimation and Auditing in a Black-Box SettingÖnder Askin, Holger Dette, Martin Dunsche, Tim Kutta 等USENIX Security 2025
- Privacy Audit as Bits Transmission: (Im)possibilities for Audit by One RunZihang Xiang, Tianhao Wang, Di WangUSENIX Security 2025
- Sequential Auditing for f-Differential PrivacyTim Kutta, Martin Dunsche, Yu Wei, Vassilis ZikasUSENIX Security 2026
- One-shot Empirical Privacy Estimation for Federated LearningGalen Andrew, Peter Kairouz, Sewoong Oh, Alina Oprea 等ICLR 2024 · 被引用 48 次
- Privacy Auditing with One (1) Training RunThomas Steinke, Milad Nasr, Matthew JagielskiNeurIPS 2023 · 被引用 178 次
