42 citations · 80 across the 28 of their papers we have counts for
29 papers
Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy
Johannes Kaiser, Alexander Ziller, Eleni Triantafillou +2
Individual Differential Privacy (iDP) promises users control over their privacy, but this promise can be broken in practice. We reveal a previously overlooked vulnerability in samp…
Sensitivity, Specificity, and Consistency: A Tripartite Evaluation of Privacy Filters for Synthetic Data Generation
Adil Koeken, Alexander Ziller, Moritz Knolle +1
The generation of privacy-preserving synthetic datasets is a promising avenue for overcoming data scarcity in medical AI research. Post-hoc privacy filtering techniques, designed t…
On Arbitrary Predictions from Equally Valid Models
Sarah Lockfisch, Kristian Schwethelm, Martin Menten +4
Model multiplicity refers to the existence of multiple machine learning models that describe the data equally well but may produce different predictions on individual samples. In m…
Visual Privacy Auditing with Diffusion Models
Kristian Schwethelm, Johannes Kaiser, Moritz Knolle +3
Data reconstruction attacks on machine learning models pose a substantial threat to privacy, potentially leaking sensitive information. Although defending against such attacks usin…
From Mean to Extreme: Formal Differential Privacy Bounds on the Success of Real-World Data Reconstruction Attacks
Anneliese Riess, Kristian Schwethelm, Johannes Kaiser +4
The gold standard for privacy in machine learning, Differential Privacy (DP), is often interpreted through its guarantees against membership inference. However, translating DP budg…
Reconciling AI Performance and Data Reconstruction Resilience for Medical Imaging
Alexander Ziller, Tamara T. Mueller, Simon Stieger +5
Artificial Intelligence (AI) models are vulnerable to information leakage of their training data, which can be highly sensitive, for example in medical imaging. Privacy Enhancing T…
How Low Can You Go? Surfacing Prototypical In-Distribution Samples for Unsupervised Anomaly Detection
Felix Meissen, Johannes Getzner, Alexander Ziller +4
Unsupervised anomaly detection (UAD) alleviates large labeling efforts by training exclusively on unlabeled in-distribution data and detecting outliers as anomalies. Generally, the…
Bias-Aware Minimisation: Understanding and Mitigating Estimator Bias in Private SGD
Moritz Knolle, Robert Dorfman, Alexander Ziller +2
Differentially private SGD (DP-SGD) holds the promise of enabling the safe and responsible application of machine learning to sensitive datasets. However, DP-SGD only provides a bi…
Body Fat Estimation from Surface Meshes using Graph Neural Networks
Tamara T. Mueller, Siyu Zhou, Sophie Starck +7
Body fat volume and distribution can be a strong indication for a person's overall health and the risk for developing diseases like type 2 diabetes and cardiovascular diseases. Fre…
Bounding data reconstruction attacks with the hypothesis testing interpretation of differential privacy
Georgios Kaissis, Jamie Hayes, Alexander Ziller +1
We explore Reconstruction Robustness (ReRo), which was recently proposed as an upper bound on the success of data reconstruction attacks against machine learning models. Previous r…
Interpretable 2D Vision Models for 3D Medical Images
Alexander Ziller, Ayhan Can Erdur, Marwa Trigui +9
Training Artificial Intelligence (AI) models on 3D images presents unique challenges compared to the 2D case: Firstly, the demand for computational resources is significantly highe…
Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging
Soroosh Tayebi Arasteh, Alexander Ziller, Christiane Kuhl +6
Artificial intelligence (AI) models are increasingly used in the medical domain. However, as medical data is highly sensitive, special precautions to ensure its protection are requ…
How Do Input Attributes Impact the Privacy Loss in Differential Privacy?
Tamara T. Mueller, Stefan Kolek, Friederike Jungmann +5
Differential privacy (DP) is typically formulated as a worst-case privacy guarantee over all individuals in a database. More recently, extensions to individual subjects or their at…
Exploiting segmentation labels and representation learning to forecast therapy response of PDAC patients
Alexander Ziller, Ayhan Can Erdur, Friederike Jungmann +3
The prediction of pancreatic ductal adenocarcinoma therapy response is a clinically challenging and important task in this high-mortality tumour entity. The training of neural netw…
Generalised Likelihood Ratio Testing Adversaries through the Differential Privacy Lens
Georgios Kaissis, Alexander Ziller, Stefan Kolek Martinez de Azagra +1
Differential Privacy (DP) provides tight upper bounds on the capabilities of optimal adversaries, but such adversaries are rarely encountered in practice. Under the hypothesis test…
SmoothNets: Optimizing CNN architecture design for differentially private deep learning
Nicolas W. Remerscheid, Alexander Ziller, Daniel Rueckert +1
The arguably most widely employed algorithm to train deep neural networks with Differential Privacy is DPSGD, which requires clipping and noising of per-sample gradients. This intr…
Privacy: An axiomatic approach
Alexander Ziller, Tamara Mueller, Rickmer Braren +2
The increasing prevalence of large-scale data collection in modern society represents a potential threat to individual privacy. Addressing this threat, for example through privacy-…
Differentially private training of residual networks with scale normalisation
Helena Klause, Alexander Ziller, Daniel Rueckert +2
The training of neural networks with Differentially Private Stochastic Gradient Descent offers formal Differential Privacy guarantees but introduces accuracy trade-offs. In this wo…
Distributed Machine Learning and the Semblance of Trust
Dmitrii Usynin, Alexander Ziller, Daniel Rueckert +2
The utilisation of large and diverse datasets for machine learning (ML) at scale is required to promote scientific insight into many meaningful problems. However, due to data gover…
Complex-valued Federated Learning with Differential Privacy and MRI Applications
Anneliese Riess, Alexander Ziller, Stefan Kolek +3
Federated learning enhanced with Differential Privacy (DP) is a powerful privacy-preserving strategy to protect individuals sharing their sensitive data for processing in fields su…
A unified interpretation of the Gaussian mechanism for differential privacy through the sensitivity index
Georgios Kaissis, Moritz Knolle, Friederike Jungmann +3
The Gaussian mechanism (GM) represents a universally employed tool for achieving differential privacy (DP), and a large body of work has been devoted to its analysis. We argue that…
Partial sensitivity analysis in differential privacy
Tamara T. Mueller, Alexander Ziller, Dmitrii Usynin +4
Differential privacy (DP) allows the quantification of privacy loss when the data of individuals is subjected to algorithmic processing such as machine learning, as well as the pro…
An automatic differentiation system for the age of differential privacy
Dmitrii Usynin, Alexander Ziller, Moritz Knolle +4
We introduce Tritium, an automatic differentiation-based sensitivity analysis framework for differentially private (DP) machine learning (ML). Optimal noise calibration in this set…
Sensitivity analysis in differentially private machine learning using hybrid automatic differentiation
Alexander Ziller, Dmitrii Usynin, Moritz Knolle +6
In recent years, formal methods of privacy protection such as differential privacy (DP), capable of deployment to data-driven tasks such as machine learning (ML), have emerged. Rec…