Cited by 51Privacy-Preserving Technologies in DataPrivacy, Security, and Data ProtectionAdversarial Robustness in Machine Learning

Differentially Private Representation for NLP: Formal Guarantee and An Empirical Study on Privacy and Fairness

Open access
Lyu, Lingjuan, He, Xuanli, Li, Yitong·2020·Findings of the Association for Computational Linguistics: EMNLP 2020

Abstract

It has been demonstrated that hidden representation learned by deep model can encode private information of the input, hence can be exploited to recover such information with reasonable accuracy.To address this issue, we propose a novel approach called Differentially Private Neural Representation (DPNR) to preserve privacy of the extracted representation from text.DPNR utilises Differential Privacy (DP) to provide formal privacy guarantee.Further, we show that masking words via dropout can further enhance privacy.To maintain utility of the learned representation, we integrate DP-noisy representation into a robust training process to derive a robust target model, which also helps for model fairness over various demographic variables.Experimental results on benchmark datasets under various parameter settings demonstrate that DPNR largely reduces privacy leakage without significantly sacrificing the main task performance.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.18653/v1/2020.findings-emnlp.213

Cites

47 of 47 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Xu et al. demonstrated that MultiKrum is not robust against untargeted poisoning.

    “Xu et al. [148] demonstrated that MultiKrum is not robust against the untargeted poisoning.”
  • Recent inspections revealed that previous Byzantine-robust FL mechanisms are brittle and can be easily circumvented.

    “In spite of their robustness guarantees, recent inspections revealed that previous Byzantine-robust FL mechanisms are also quite brittle and can be easily circumvented.”

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 2

  1. Steven Bird, Ewan Klein, and Edward Loper. 2009. Natural language processing with Python: analyz- ing text with the natural language toolkit. " O'Reilly Media, Inc.".
  2. Tomas Mikolov, Ilya Sutskever, Kai Chen, Greg S Cor- rado, and Jeff Dean. 2013. Distributed representa- tions of words and phrases and their composition- ality. In Advances in Neural Information Process- ing Systems 26: 27th Annual Conference on Neural Information Processing Systems 2013, pages 3111- 3119.

Cited by

Sorted by citations

Authors
Lyu, L., He, X., & Li, Y.
Affiliations
  • National University of Singapore (SG)
  • Monash University (AU)
  • The University of Melbourne (AU)
Venue
Findings of the Association for Computational Linguistics: EMNLP 2020
Published
2020
Pages
2355-2365
OpenAlex
W3098049952
Cited by
51
References
46
Citations by year
2026: 3 · 2025: 6 · 2024: 9 · 2023: 13 · 2022: 12 · 2021: 8
FWCI
3.15
Type
conference paper
Language
en
Open access
Licence
cc-by
Locations
  • Findings of the Association for Computational Linguistics: EMNLP (Findings of EMNLP) (publishedVersion, cc-by)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Keywords
differential privacy, neural representation learning, privacy leakage, robust training, model fairness, demographic fairness, natural language processing

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review