Saved in:
Bibliographic Details
Main Authors: Chen, Yizhuo, Chun-Fu, Chen, Hsu, Hsiang, Hu, Shaohan, Abdelzaher, Tarek
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2506.07308
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915378779652096
author Chen, Yizhuo
Chun-Fu
Chen
Hsu, Hsiang
Hu, Shaohan
Abdelzaher, Tarek
author_facet Chen, Yizhuo
Chun-Fu
Chen
Hsu, Hsiang
Hu, Shaohan
Abdelzaher, Tarek
contents The growing Machine Learning (ML) services require extensive collections of user data, which may inadvertently include people's private information irrelevant to the services. Various studies have been proposed to protect private attributes by removing them from the data while maintaining the utilities of the data for downstream tasks. Nevertheless, as we theoretically and empirically show in the paper, these methods reveal severe vulnerability because of a common weakness rooted in their adversarial training based strategies. To overcome this limitation, we propose a novel approach, PASS, designed to stochastically substitute the original sample with another one according to certain probabilities, which is trained with a novel loss function soundly derived from information-theoretic objective defined for utility-preserving private attributes protection. The comprehensive evaluation of PASS on various datasets of different modalities, including facial images, human activity sensory signals, and voice recording datasets, substantiates PASS's effectiveness and generalizability.
format Preprint
id arxiv_https___arxiv_org_abs_2506_07308
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle PASS: Private Attributes Protection with Stochastic Data Substitution
Chen, Yizhuo
Chun-Fu
Chen
Hsu, Hsiang
Hu, Shaohan
Abdelzaher, Tarek
Machine Learning
The growing Machine Learning (ML) services require extensive collections of user data, which may inadvertently include people's private information irrelevant to the services. Various studies have been proposed to protect private attributes by removing them from the data while maintaining the utilities of the data for downstream tasks. Nevertheless, as we theoretically and empirically show in the paper, these methods reveal severe vulnerability because of a common weakness rooted in their adversarial training based strategies. To overcome this limitation, we propose a novel approach, PASS, designed to stochastically substitute the original sample with another one according to certain probabilities, which is trained with a novel loss function soundly derived from information-theoretic objective defined for utility-preserving private attributes protection. The comprehensive evaluation of PASS on various datasets of different modalities, including facial images, human activity sensory signals, and voice recording datasets, substantiates PASS's effectiveness and generalizability.
title PASS: Private Attributes Protection with Stochastic Data Substitution
topic Machine Learning
url https://arxiv.org/abs/2506.07308