壓縮隱私生成式對抗網路

Abstract

機器學習服務(MLaaS)近年來為我們日常生活帶來了很多便利，事實上這些部署在雲上的機器學習服務造成了嚴重隱私洩露的問題。此篇論文提出了壓縮隱私生成式對抗網路(CPGAN)，這是一個數據驅動化的模型並且運用了正火紅的對抗式學習概念。我們的目標是，在上傳資料至雲端前先經過設計好的非線性壓縮類神經網路(privatizer)，產生的壓縮信號可保留原機敏性數據的可用性且移除侵犯隱私的相關訊息，在此框架下可以提供二階段的隱私保護：原始資料只會保留在本地端、此壓縮信號可以防禦重建攻擊。要評量此壓縮網路的好壞，可以由壓縮隱私生成式對抗網路的分類器來衡量數據可用性，並另外學習一個重建網路(adversary reconstructor)來衡量隱私保護的程度。我們實驗不同種類的資料集並和過去文獻方法比較，由此證實壓縮隱私生成式對抗網路可以在數據可用性及隱私維護間達到較好的平衡(trade-off)。

Machine learning as a service (MLaaS) has brought much convenience to our daily lives recently. However, the fact that the service is provided through cloud raises privacy leakage issues. In this work we propose the compressive privacy generative adversarial network (CPGAN), a data-driven adversarial learning framework for generating compressing representations that retain utility comparable to state-of-the-art, with the additional feature of defending against reconstruction attack. This is achieved by applying adversarial learning scheme to the design of compression network (privatizer), whose utility/privacy performances are evaluated by the utility classifier and the adversary reconstructor, respectively. Experimental results demonstrate that CPGAN achieves better utility/privacy trade-off in comparison with the previous work, and is applicable to real-world large datasets.