arXiv Machine Learning By Rob Romijnders, Christos Louizos, Yuki M. Asano, Max Welling

DNA: Differentially private Neural Augmentation for contact tracing

Read the original on arXiv Machine Learning →

The paper introduces DNA, a system that enhances decentralized contact tracing by combining statistical inference with a differentially private neural network. By ensuring the neural augmentation satisfies differential privacy, the method improves detection of potentially infected individuals even at a privacy budget of epsilon=1 per message. Simulation results suggest that this approach can reduce infection rates through more targeted testing.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Machine Learning.

arXiv Machine Learning
Sep 14

Protect Your Score: Contact Tracing With Differential Privacy Guarantees

The paper introduces a contact tracing algorithm that incorporates differential privacy to protect users’ risk scores from adversarial inference. By releasing each risk score with an epsilon of 1, the algorithm achieves a two- to ten-fold reduction in infection rates across two leading COVID‑19 agent‑based simulators. This work claims to be the first to provide differential privacy guarantees for risk score disclosure in COVID‑19 contact tracing.

By Rob Romijnders, Christos Louizos, Yuki M. Asano, Max Welling
arXiv Computer Vision
Sep 21

Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses

The paper "Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses" provides a comprehensive review of model inversion (MI) attacks that exploit trained deep neural networks to reconstruct private training data. It traces the evolution of MI from early machine‑learning contexts to recent DNN‑based attacks across various modalities and learning tasks, offering a detailed taxonomy and comparative analysis of both attacks and defenses. The authors also present an open‑source toolbox on GitHub to support further research in this area.

By Hao Fang, Yixiang Qiu, Hongyao Yu, Wenbo Yu, Jiawei Kong, Baoli Chong, Bin Chen, Xuan Wang, Shu-Tao Xia, Ke Xu
arXiv Machine Learning
Oct 8

Efficient Provably Private Classification with a Tabular Foundation Model

Efficient Provably Private Classification with a Tabular Foundation Model introduces PrivTab, a tabular foundation model that embeds differential privacy directly into its architecture. Pretrained on simulated datasets, PrivTab uses in-context learning to convert sensitive rows into compact, provably private summaries, enabling a single forward pass for classification. The model outperforms private linear and neural‑network baselines under moderate-to-strong privacy, shows negligible membership leakage, maintains well‑calibrated predictions, and reduces dataset fitting time by 10,000×.

By Talal Alrawajfeh, Cristiana Diaconu, Ossi R\"ais\"a, Sebastian Rodriguez Beltran, Yuan He, John Bronskill, Richard E. Turner, Antti Honkela
arXiv Machine Learning
Aug 28

Private and interpretable clinical prediction with quantum-inspired tensor train models

The paper demonstrates that publicly available clinical machine learning models, such as logistic regression (LR), pose significant privacy risks because attackers can recover model parameters and identify training cohorts through various membership inference attacks. The authors show that even small cohorts can be reliably identified and that common practices like cross-validation can worsen the risk. To mitigate this, they propose a quantum-inspired defense that tensorizes discretized models into tensor trains (TTs), which obfuscates parameters, preserves accuracy, and maintains interpretability while providing black‑box protection comparable to Differential Privacy.

By Jos\'e Ram\'on Pareja Monturiol, Juliette Sinnott, Roger G. Melko, Mohammad Kohandel