PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learning

Abstract

We propose a new framework of synthesizing data using deep generative models in a differentially private manner. Within our framework, sensitive data are sanitized with rigorous privacy guarantees in a one-shot fashion, such that training deep generative models is possible without re-using the original data. Hence, no extra privacy costs or model constraints are incurred, in contrast to popular gradient sanitization approaches, which, among other issues, cause degradation in privacy guarantees as the training iteration increases. We demonstrate a realization of our framework by making use of the characteristic function and an adversarial re-weighting objective, which are of independent interest as well. Our proposal has theoretical guarantees of performance, and empirical evaluations on multiple datasets show that our approach outperforms other methods at reasonable levels of privacy.

[Link][Slide][BibTeX]

 @inproceedings{liew2021pearl,
  title={PEARL: Data Synthesis via Private Embeddings and Adversarial Reconstruction Learning},
  author={Liew, Seng Pei and Takahashi, Tsubasa and Ueno, Michihiko},
  booktitle={International Conference on Learning Representations},
  year={2022}
}