Year: 2022
Type: preprint
Abstract: Deep learning models trained on large-scale data have achieved encouraging performance in many real-world tasks. Meanwhile, publishing those models trained on sensitive datasets, such as medical records, could pose serious privacy concerns. To counter these issues, one of the current state-of-the-art approaches is the Private Aggregation of Teacher Ensembles, or PATE, which achieved promising results in preserving the utility of the model while providing a strong privacy guarantee. PATE combines an ensemble of "teacher models" trained on sensitive data and transfers the knowledge to a "student" model through the noisy aggregation of teachers' votes for labeling unlabeled public data which the student model will be trained on. However, the knowledge or voted labels learned by the student are noisy due to private aggregation. Learning directly from noisy labels can significantly impact the accuracy of the student model. In this paper, we propose the PATE++ mechanism, which combines the current advanced noisy label training mechanisms with the original PATE framework to enhance its accuracy. A novel structure of Generative Adversarial Nets (GANs) is developed in order to integrate them effectively. In addition, we develop a novel noisy label detection mechanism for semi-supervised model training to further improve student model performance when training with noisy labels. We evaluate our method on Fashion-MNIST and SVHN to show the improvements on the original PATE on all measures.
Source: arXiv (Cornell University)
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
Awards: G1234997963, G1523888516, G2584881318, BigData:IA:Collaborative Research: TIMES: A tensor factorization platform for spatio-temporal data, G3883116647, Recruitment of Rising Stars, Open Health Natural Language Processing Collaboratory, G4972693717, Decentralized differentially-private methods for dynamic data release and analysis, G5388406022, G6071252945, SCC-PG: JST: Privacy-enhanced data-driven health monitoring for smart and connected senior communities, G6515066292, Georgia CTSA Research Supplement to Promote Diversity in Health-Related Research (Hernandez), RAPID: Collaborative: REACT: Real-time Contact Tracing and Risk Monitoring via Privacy-enhanced Mobile Tracking, G7048620842, G7757262149, G7830320759, G7860539593, G9000020272, G9000046174, G9000049800, G9000105665
OpenAlex ID: W4308243441