Cited by 87Privacy-Preserving Technologies in DataAdversarial Robustness in Machine LearningCryptography and Data Security

Privacy-Preserving Adversarial Networks

Open access
Tripathy, Ardhendu, Wang, Ye, Ishwar, Prakash·2019·2019 57th Annual Allerton Conference on Communication, Control, and Computing (Allerton)

Abstract

We propose a data-driven framework for optimizing privacy-preserving data release mechanisms to attain the information-theoretically optimal tradeoff between minimizing distortion of useful data and concealing specific sensitive information. Our approach employs adversarially-trained neural networks to implement randomized mechanisms and to perform a variational approximation of mutual information privacy. We validate our Privacy-Preserving Adversarial Networks (PPAN) framework via proof-of-concept experiments on discrete and continuous synthetic data, as well as the MNIST handwritten digits dataset. For synthetic data, our model-agnostic PPAN approach achieves tradeoff points very close to the optimal tradeoffs that are analytically-derived from model knowledge. In experiments with the MNIST data, we visually demonstrate a learned tradeoff between minimizing the pixel-level distortion versus concealing the written digit.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1109/allerton.2019.8919758

Cites

34 of 34 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Examples of GAN-based defense models include generative adversarial privacy, privacy-preserving adversarial networks, compressive adversarial privacy, and reconstructive adversarial network.

    “Examples of defense models include generative adversarial privacy [30], privacy-preserving adversarial networks [31], compressive adversarial privacy [32], and reconstructive adversarial network [33].”

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

3 of the 37 references couldn’t be matched to a known paper.

Research works printed but not linked: 2

  1. I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y. Bengio. Generative adversarial nets. In Advances in neural information processing systems, pages 2672-2680, 2014.
  2. S. Tokui, K. Oono, S. Hido, and J. Clayton. Chainer: a next-generation open source framework for deep learning. In Proceedings of Workshop on Machine Learning Systems (LearningSys) in The Twenty-ninth Annual Conference on Neural Information Processing Systems (NIPS), 2015.

Cited by

Sorted by citations

Authors
Tripathy, A., Wang, Y., & Ishwar, P.
Affiliations
  • University of Wisconsin–Madison (US)
  • Mitsubishi Electric (United States) (US)
  • Boston University (US)
Venue
2019 57th Annual Allerton Conference on Communication, Control, and Computing (Allerton)
Publisher
IEEE
Published
2019-09
Pages
495-505
OpenAlex
W2779622762
Cited by
87
References
37
Citations by year
2026: 2 · 2025: 5 · 2024: 9 · 2023: 13 · 2022: 10 · 2021: 14 · 2020: 15 · 2019: 15 · 2018: 2 · 2017: 2
FWCI
5.16
Type
conference paper
Language
en
Open access
Locations
  • Allerton Conference on Communication, Control, and Computing (publishedVersion)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
Keywords
privacy-preserving data publishing, differential privacy, adversarial neural networks, information-theoretic optimality, variational approximation, MNIST

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review