{"title":"一种基于分层扰动的隐私保护深度神经网络","authors":"Tosin A. Adesuyi, Byeong-Man Kim","doi":"10.1109/ICAIIC.2019.8669014","DOIUrl":null,"url":null,"abstract":"Datasets are sources of information mining where knowledge can be derived. The versatility of these dataset determines the quality of knowledge gained. However, several of these data contains personal sensitive information that can lead to infringement of privacy. Existing research tends to deliver DNN models that can preserve privacy of personal information but the accuracy of these models are rather much lower as compared to their non-privacy preserving counterparts. This is due to the degree of noise and the points where noise was added to perturb the model data. Consequently, this has led to minimal adoption of privacy preserving DNN models in the industrial world. In this paper, we present a layer-wise perturbation approach and differential privacy technique to determine points of perturbation and preserve privacy. Our approach was able to narrow down the accuracy gap between privacy-preserving and non-privacy preserving DNN model.","PeriodicalId":273383,"journal":{"name":"2019 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)","volume":"103 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2019-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"15","resultStr":"{\"title\":\"A layer-wise Perturbation based Privacy Preserving Deep Neural Networks\",\"authors\":\"Tosin A. Adesuyi, Byeong-Man Kim\",\"doi\":\"10.1109/ICAIIC.2019.8669014\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Datasets are sources of information mining where knowledge can be derived. The versatility of these dataset determines the quality of knowledge gained. However, several of these data contains personal sensitive information that can lead to infringement of privacy. Existing research tends to deliver DNN models that can preserve privacy of personal information but the accuracy of these models are rather much lower as compared to their non-privacy preserving counterparts. This is due to the degree of noise and the points where noise was added to perturb the model data. Consequently, this has led to minimal adoption of privacy preserving DNN models in the industrial world. In this paper, we present a layer-wise perturbation approach and differential privacy technique to determine points of perturbation and preserve privacy. Our approach was able to narrow down the accuracy gap between privacy-preserving and non-privacy preserving DNN model.\",\"PeriodicalId\":273383,\"journal\":{\"name\":\"2019 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)\",\"volume\":\"103 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2019-02-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"15\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2019 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICAIIC.2019.8669014\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2019 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICAIIC.2019.8669014","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
A layer-wise Perturbation based Privacy Preserving Deep Neural Networks
Datasets are sources of information mining where knowledge can be derived. The versatility of these dataset determines the quality of knowledge gained. However, several of these data contains personal sensitive information that can lead to infringement of privacy. Existing research tends to deliver DNN models that can preserve privacy of personal information but the accuracy of these models are rather much lower as compared to their non-privacy preserving counterparts. This is due to the degree of noise and the points where noise was added to perturb the model data. Consequently, this has led to minimal adoption of privacy preserving DNN models in the industrial world. In this paper, we present a layer-wise perturbation approach and differential privacy technique to determine points of perturbation and preserve privacy. Our approach was able to narrow down the accuracy gap between privacy-preserving and non-privacy preserving DNN model.