Saved in:
| Main Authors: | , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2405.04032 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866917660946595840 |
|---|---|
| author | Zheng, Chunyan Sun, Keke Zhao, Wenhao Zhou, Haibo Jiang, Lixin Song, Shaoyang Zhou, Chunlai |
| author_facet | Zheng, Chunyan Sun, Keke Zhao, Wenhao Zhou, Haibo Jiang, Lixin Song, Shaoyang Zhou, Chunlai |
| contents | Large pretrained language models (LLMs) have shown surprising In-Context Learning (ICL) ability. An important application in deploying large language models is to augment LLMs with a private database for some specific task. The main problem with this promising commercial use is that LLMs have been shown to memorize their training data and their prompt data are vulnerable to membership inference attacks (MIA) and prompt leaking attacks. In order to deal with this problem, we treat LLMs as untrusted in privacy and propose a locally differentially private framework of in-context learning(LDP-ICL) in the settings where labels are sensitive. Considering the mechanisms of in-context learning in Transformers by gradient descent, we provide an analysis of the trade-off between privacy and utility in such LDP-ICL for classification. Moreover, we apply LDP-ICL to the discrete distribution estimation problem. In the end, we perform several experiments to demonstrate our analysis results. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2405_04032 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Locally Differentially Private In-Context Learning Zheng, Chunyan Sun, Keke Zhao, Wenhao Zhou, Haibo Jiang, Lixin Song, Shaoyang Zhou, Chunlai Cryptography and Security Artificial Intelligence Large pretrained language models (LLMs) have shown surprising In-Context Learning (ICL) ability. An important application in deploying large language models is to augment LLMs with a private database for some specific task. The main problem with this promising commercial use is that LLMs have been shown to memorize their training data and their prompt data are vulnerable to membership inference attacks (MIA) and prompt leaking attacks. In order to deal with this problem, we treat LLMs as untrusted in privacy and propose a locally differentially private framework of in-context learning(LDP-ICL) in the settings where labels are sensitive. Considering the mechanisms of in-context learning in Transformers by gradient descent, we provide an analysis of the trade-off between privacy and utility in such LDP-ICL for classification. Moreover, we apply LDP-ICL to the discrete distribution estimation problem. In the end, we perform several experiments to demonstrate our analysis results. |
| title | Locally Differentially Private In-Context Learning |
| topic | Cryptography and Security Artificial Intelligence |
| url | https://arxiv.org/abs/2405.04032 |