基于方波机制的差分隐私域自适应学习方法OA
Domain adaptive learning method under differential privacy via square wave mechanism
域自适应学习越来越成为解决域间数据分布差异和数据标记稀缺的重要手段,然而现有差分隐私等技术通常会因为引入过多噪声和性能受限,导致模型在无信任的高维场景中性能下降.针对上述问题,提出一种基于方波机制的域自适应学习方法LDP-SWDA.具体来说,在 LDP-SWDA 中,采用方波机制在特征协方差的局部区域进行高概率扰动,解决了高维数据中的特征冗余问题;引入梯度下降方法,解决了扰动后矩阵可能失去半正定性的问题.理论分析了 LDP-SWDA 的隐私,并在两个标准域自适应学习数据集上评估了 LDP-SWDA 的效果.结果表明,LDP-SWDA 在高维、隐私敏感场景下表现出良好的实用性与鲁棒性.
Domain adaptation became an increasingly important technique for addressing distributional shifts and label scarcity across domains.However,existing privacy-preserving methods,such as differential privacy,often suffered from excessive noise injection and limited model performance,especially in untrusted and high-dimensional settings.To address these challenges,this paper proposed a local differentially private square wave-based domain adaptation method called LDP-SWDA.Specifically,LDP-SWDA applied square wave-based local perturbation to the feature covariance structure with high probability.A gradient-based correction method was employed to restore the positive semi-definiteness of the covariance matrix,which might have been compromised by perturbation.Theoretical analysis was conducted on the privacy of LDP-SWDA,and the effectiveness of LDP-SWDA was evaluated on two standard domain adaptive learning datasets.The results indicated that LDP-SWDA exhibited good practicality and robustness in high-dimensional and privacy-sensitive scenarios,which had research significance.
方翔;方贤进;程俊;陈家庆;王杰
安徽理工大学 计算机科学与工程学院,安徽 淮南 232001安徽理工大学 计算机科学与工程学院,安徽 淮南 232001||安徽理工大学 煤炭无人化开采数智技术全国重点实验室,安徽 淮南 232001安徽理工大学 计算机科学与工程学院,安徽 淮南 232001安徽理工大学 计算机科学与工程学院,安徽 淮南 232001安徽理工大学 安全科学与工程学院,安徽 淮南 232001
信息技术与安全科学
域自适应学习本地差分隐私方波机制隐私保护高维
domain adaptive learninglocal differential privacysquare wave mechanismprivacy protectionhigh-dimensional
《哈尔滨商业大学学报(自然科学版)》 2026 (2)
131-140,10
国家自然科学基金(61572034)
评论