PrivLM-Bench: A Multi-level Privacy Evaluation Benchmark for Language Models

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Li, Haoran, Guo, Dadi, Li, Donghao, Fan, Wei, Hu, Qi, Liu, Xin, Chan, Chunkit, Yao, Duanyi, Yao, Yuan, Song, Yangqiu
Natura: Preprint
Pubblicazione: 2023
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866911897714950144
author Li, Haoran
Guo, Dadi
Li, Donghao
Fan, Wei
Hu, Qi
Liu, Xin
Chan, Chunkit
Yao, Duanyi
Yao, Yuan
Song, Yangqiu
author_facet Li, Haoran
Guo, Dadi
Li, Donghao
Fan, Wei
Hu, Qi
Liu, Xin
Chan, Chunkit
Yao, Duanyi
Yao, Yuan
Song, Yangqiu
contents The rapid development of language models (LMs) brings unprecedented accessibility and usage for both models and users. On the one hand, powerful LMs achieve state-of-the-art performance over numerous downstream NLP tasks. On the other hand, more and more attention is paid to unrestricted model accesses that may bring malicious privacy risks of data leakage. To address these issues, many recent works propose privacy-preserving language models (PPLMs) with differential privacy (DP). Unfortunately, different DP implementations make it challenging for a fair comparison among existing PPLMs. In this paper, we present PrivLM-Bench, a multi-perspective privacy evaluation benchmark to empirically and intuitively quantify the privacy leakage of LMs. Instead of only reporting DP parameters, PrivLM-Bench sheds light on the neglected inference data privacy during actual usage. PrivLM-Bench first clearly defines multi-faceted privacy objectives. Then, PrivLM-Bench constructs a unified pipeline to perform private fine-tuning. Lastly, PrivLM-Bench performs existing privacy attacks on LMs with pre-defined privacy objectives as the empirical evaluation results. The empirical attack results are used to fairly and intuitively evaluate the privacy leakage of various PPLMs. We conduct extensive experiments on three datasets of GLUE for mainstream LMs.
format Preprint
id arxiv_https___arxiv_org_abs_2311_04044
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle PrivLM-Bench: A Multi-level Privacy Evaluation Benchmark for Language Models
Li, Haoran
Guo, Dadi
Li, Donghao
Fan, Wei
Hu, Qi
Liu, Xin
Chan, Chunkit
Yao, Duanyi
Yao, Yuan
Song, Yangqiu
Computation and Language
Cryptography and Security
The rapid development of language models (LMs) brings unprecedented accessibility and usage for both models and users. On the one hand, powerful LMs achieve state-of-the-art performance over numerous downstream NLP tasks. On the other hand, more and more attention is paid to unrestricted model accesses that may bring malicious privacy risks of data leakage. To address these issues, many recent works propose privacy-preserving language models (PPLMs) with differential privacy (DP). Unfortunately, different DP implementations make it challenging for a fair comparison among existing PPLMs. In this paper, we present PrivLM-Bench, a multi-perspective privacy evaluation benchmark to empirically and intuitively quantify the privacy leakage of LMs. Instead of only reporting DP parameters, PrivLM-Bench sheds light on the neglected inference data privacy during actual usage. PrivLM-Bench first clearly defines multi-faceted privacy objectives. Then, PrivLM-Bench constructs a unified pipeline to perform private fine-tuning. Lastly, PrivLM-Bench performs existing privacy attacks on LMs with pre-defined privacy objectives as the empirical evaluation results. The empirical attack results are used to fairly and intuitively evaluate the privacy leakage of various PPLMs. We conduct extensive experiments on three datasets of GLUE for mainstream LMs.
title PrivLM-Bench: A Multi-level Privacy Evaluation Benchmark for Language Models
topic Computation and Language
Cryptography and Security
url https://arxiv.org/abs/2311.04044