Technical Report for the Forgotten-by-Design Project: Targeted Obfuscation for Machine Learning
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2025
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866910792017772544 |
|---|---|
| author | Brännvall, Rickard Adomaitis, Laurynas Görnerup, Olof Sedrati, Anass |
| author_facet | Brännvall, Rickard Adomaitis, Laurynas Görnerup, Olof Sedrati, Anass |
| contents | The right to privacy, enshrined in various human rights declarations, faces new challenges in the age of artificial intelligence (AI). This paper explores the concept of the Right to be Forgotten (RTBF) within AI systems, contrasting it with traditional data erasure methods. We introduce Forgotten by Design, a proactive approach to privacy preservation that integrates instance-specific obfuscation techniques during the AI model training process. Unlike machine unlearning, which modifies models post-training, our method prevents sensitive data from being embedded in the first place. Using the LIRA membership inference attack, we identify vulnerable data points and propose defenses that combine additive gradient noise and weighting schemes. Our experiments on the CIFAR-10 dataset demonstrate that our techniques reduce privacy risks by at least an order of magnitude while maintaining model accuracy (at 95% significance). Additionally, we present visualization methods for the privacy-utility trade-off, providing a clear framework for balancing privacy risk and model accuracy. This work contributes to the development of privacy-preserving AI systems that align with human cognitive processes of motivated forgetting, offering a robust framework for safeguarding sensitive information and ensuring compliance with privacy regulations. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2501_11525 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Technical Report for the Forgotten-by-Design Project: Targeted Obfuscation for Machine Learning Brännvall, Rickard Adomaitis, Laurynas Görnerup, Olof Sedrati, Anass Machine Learning Artificial Intelligence Cryptography and Security 68T09 (Primary) 68T05 (Secondary) D.4.6; K.6.5; I.2.6 The right to privacy, enshrined in various human rights declarations, faces new challenges in the age of artificial intelligence (AI). This paper explores the concept of the Right to be Forgotten (RTBF) within AI systems, contrasting it with traditional data erasure methods. We introduce Forgotten by Design, a proactive approach to privacy preservation that integrates instance-specific obfuscation techniques during the AI model training process. Unlike machine unlearning, which modifies models post-training, our method prevents sensitive data from being embedded in the first place. Using the LIRA membership inference attack, we identify vulnerable data points and propose defenses that combine additive gradient noise and weighting schemes. Our experiments on the CIFAR-10 dataset demonstrate that our techniques reduce privacy risks by at least an order of magnitude while maintaining model accuracy (at 95% significance). Additionally, we present visualization methods for the privacy-utility trade-off, providing a clear framework for balancing privacy risk and model accuracy. This work contributes to the development of privacy-preserving AI systems that align with human cognitive processes of motivated forgetting, offering a robust framework for safeguarding sensitive information and ensuring compliance with privacy regulations. |
| title | Technical Report for the Forgotten-by-Design Project: Targeted Obfuscation for Machine Learning |
| topic | Machine Learning Artificial Intelligence Cryptography and Security 68T09 (Primary) 68T05 (Secondary) D.4.6; K.6.5; I.2.6 |
| url | https://arxiv.org/abs/2501.11525 |