Privacy Amplification
An effect in differential privacy whereby mechanisms such as random sampling or random allocation make it difficult for an attacker to determine whether an individual participated in training, thereby yielding stronger privacy protection at a smaller privacy budget.
Timeline (last 90 days)
The privacy amplification effect of DP-SGD relies on the premise that the batch size is not leaked.
The injection of dummy points yields subsampling-style privacy amplification for the count release, so that the expected number of required dummy points can be asymptotically smaller than what is needed to directly privatize the batch size with non-negative noise (sensitivity 1).
All Facts (2)
The privacy amplification effect of DP-SGD relies on the premise that the batch size is not leaked.
50%UnverifiedThe injection of dummy points yields subsampling-style privacy amplification for the count release, so that the expected number of required dummy points can be asymptotically smaller than what is needed to directly privatize the batch size with non-negative noise (sensitivity 1).
50%