English(EN) From Pixels to Privacy-Sensitive Features: An Information-Theoretic Framework for Reconstruction Bounds

新框架为 DP-SGD 模型设定了隐私敏感的重建边界

作者 PulseAugur 编辑部 · [1 个来源] · 2026-10-12 04:00

研究人员开发了一个新的信息论框架，用于建立使用差分隐私 (DP-SGD) 训练的模型的重建边界。该框架提供了一个可在训练前计算的失真边界，揭示了对手可以从模型中恢复什么信息。它将训练所揭示的信息与数据分布的固有不确定性分开，并使用率失真理论将它们结合起来，为任何攻击的重建误差设定下限。该框架已应用于高维图像，首次给出了 LPIPS 测量的重建失真的已知下限，并在常见的隐私预算范围内展示了非微小的、不可避免的重建误差。 AI

影响提供了一个理论工具来量化差分隐私模型中的隐私泄露，从而更好地理解重建风险。

排序理由关于机器学习隐私新理论框架的学术论文。[lever_c_demoted from research: ic=1 ai=1.0]

在 arXiv stat.ML 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 38 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 关于机器学习隐私新理论框架的学术论文。[lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: paper, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Breaking (< 6h); Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

arXiv stat.ML TIER_1 English(EN) · Henry Bourne, Robert F. Allison · 2026-10-12 04:00

从像素到隐私敏感特征：重建边界的信息论框架

arXiv:2610.13768v1 Announce Type: new Abstract: What can an adversary recover from a model trained with DP-SGD? Its $(\varepsilon,\delta)$ guarantee does not answer this question directly. We derive a distortion bound that can be computed before training and applies even to an ad…

本文如何被排名

报道来源 [1]

从像素到隐私敏感特征：重建边界的信息论框架

相关实体

相关话题