bounding user contributions a bias variance trade off in
play

Bounding User Contributions: A Bias-Variance Trade-off in - PowerPoint PPT Presentation

Bounding User Contributions: A Bias-Variance Trade-off in Differential Privacy Kareem Amin, Alex Kulesza, Andrs Muoz Medina, Sergei Vassilvitskii Google Research NY Typical DP assumption: Reality: One user = one example Users contribute


  1. Bounding User Contributions: A Bias-Variance Trade-off in Differential Privacy Kareem Amin, Alex Kulesza, Andrés Muñoz Medina, Sergei Vassilvitskii Google Research NY

  2. Typical DP assumption: Reality: One user = one example Users contribute many times

  3. High cap = excessive noise Low cap = biased data We investigate this bias-variance trade-off using tools from learning theory

  4. Setting Infinite collection of users • Distribution P over users • Each user has a unique distribution over examples • I.i.d. data: first sample a user from P , then sample the user’s distribution

  5. Learning • Cap each user at a 𝞾 0 fraction of the dataset • Run a standard differentially private ERM algorithm

  6. <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> Result Finite 0 1 s Bias due to Privacy noise ✓r ◆ ✓ ◆ Var( H ) 1 1 A + ˜ sample L ( h priv ) ≤ inf h ∈ H L ( h ) + O + O O @ capping variance K 2 ( τ 0 ) τ 0 n τ 0 variance

  7. <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> Result Finite 0 1 s Privacy noise ✓r ◆ ✓ ◆ Var( H ) 1 1 A + ˜ sample L ( h priv ) ≤ inf h ∈ H L ( h ) + O + O O @ variance K 2 ( τ 0 ) τ 0 n τ 0 variance Bias due to capping

  8. <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">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</latexit> <latexit sha1_base64="7uFYgDiClgiAivHmMF4hNngkNgc=">ACw3icbVFba9swFJbdXbrslnaPexELA4dBsEthewdg8AG7WBJC1FmZEWORWTZlY4LQehP9q37NZNzKb0dEPr0ne87ks7JaikMxPFNEO49e/7i5f6rzus3b9+97x4cTkzVaMbHrJKVvsio4VIoPgYBkl/UmtMyk/w8W35v8+dXBtRqT+wqvmspAslcsEoeCrt/iMlhYJRaX+5qEjXJ13aWosr18dE8ktMhMpTW/gNjxy+p+93vuBTL8ohwsRcarCY5Joyu6szodpFo76zBGiTxg7AlosCvBOgkIOef21D1VItmZsLpjI7g13t65U/78exRt1P1badrtxYN4HfgxSLagh7ZxlnavybxiTckVMEmNmSZxDTNLNQgmueuQxvCasiVd8KmHipbczOx6Bg5/9swc5X2SwFes3cdlpbGrMrMK9vemIe5lnwqN20g/zazQtUNcMU2F+WNxFDhdqB4LjRnIFceUKaFfytmBfV9AT/2jm9C8vDLj8HkaJDEg+T3cW94sm3HPvqIPqEIJegrGqIROkNjxIJhkAdVUIc/wmWoQ9hIw2Dr+YDuRej+A0h/2hY=</latexit> Result 0 1 s Privacy noise ✓r ◆ ✓ ◆ Var( H ) 1 1 A + ˜ L ( h priv ) ≤ inf h ∈ H L ( h ) + O + O O @ variance K 2 ( τ 0 ) τ 0 n τ 0 Bias due to Finite capping sample variance

Recommend


More recommend