It's My Data Too: Private ML for Datasets with Multi-User Training Examples

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Ganesh, Arun, McKenna, Ryan, McMahan, Brendan, Smith, Adam, Wu, Fan
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866909525594865664
author Ganesh, Arun
McKenna, Ryan
McMahan, Brendan
Smith, Adam
Wu, Fan
author_facet Ganesh, Arun
McKenna, Ryan
McMahan, Brendan
Smith, Adam
Wu, Fan
contents We initiate a study of algorithms for model training with user-level differential privacy (DP), where each example may be attributed to multiple users, which we call the multi-attribution model. We first provide a carefully chosen definition of user-level DP under the multi-attribution model. Training in the multi-attribution model is facilitated by solving the contribution bounding problem, i.e. the problem of selecting a subset of the dataset for which each user is associated with a limited number of examples. We propose a greedy baseline algorithm for the contribution bounding problem. We then empirically study this algorithm for a synthetic logistic regression task and a transformer training task, including studying variants of this baseline algorithm that optimize the subset chosen using different techniques and criteria. We find that the baseline algorithm remains competitive with its variants in most settings, and build a better understanding of the practical importance of a bias-variance tradeoff inherent in solutions to the contribution bounding problem.
format Preprint
id arxiv_https___arxiv_org_abs_2503_03622
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle It's My Data Too: Private ML for Datasets with Multi-User Training Examples
Ganesh, Arun
McKenna, Ryan
McMahan, Brendan
Smith, Adam
Wu, Fan
Machine Learning
We initiate a study of algorithms for model training with user-level differential privacy (DP), where each example may be attributed to multiple users, which we call the multi-attribution model. We first provide a carefully chosen definition of user-level DP under the multi-attribution model. Training in the multi-attribution model is facilitated by solving the contribution bounding problem, i.e. the problem of selecting a subset of the dataset for which each user is associated with a limited number of examples. We propose a greedy baseline algorithm for the contribution bounding problem. We then empirically study this algorithm for a synthetic logistic regression task and a transformer training task, including studying variants of this baseline algorithm that optimize the subset chosen using different techniques and criteria. We find that the baseline algorithm remains competitive with its variants in most settings, and build a better understanding of the practical importance of a bias-variance tradeoff inherent in solutions to the contribution bounding problem.
title It's My Data Too: Private ML for Datasets with Multi-User Training Examples
topic Machine Learning
url https://arxiv.org/abs/2503.03622