6 papers
Empirical Calibration and Metric Differential Privacy in Language Models
Pedro Faustini, Natasha Fernandes, Annabelle McIver +1
NLP models trained with differential privacy (DP) usually adopt the DP-SGD framework, and privacy guarantees are often reported in terms of the privacy budget . However, doe…
Comparing privacy notions for protection against reconstruction attacks in machine learning
Sayan Biswas, Mark Dras, Pedro Faustini +4
Within the machine learning community, reconstruction attacks are a principal concern and have been identified even in federated learning (FL), which was designed with privacy pres…
Graded Suspiciousness of Adversarial Texts to Human
Shakila Mahjabin Tonni, Pedro Faustini, Mark Dras
Adversarial examples pose a significant challenge to deep neural networks (DNNs) across both image and text domains, with the intent to degrade model performance through meticulous…
IDT: Dual-Task Adversarial Attacks for Privacy Protection
Pedro Faustini, Shakila Mahjabin Tonni, Annabelle McIver +2
Natural language processing (NLP) models may leak private information in different ways, including membership inference, reconstruction or attribute inference attacks. Sensitive in…
Bayes' capacity as a measure for reconstruction attacks in federated learning
Sayan Biswas, Mark Dras, Pedro Faustini +4
Within the machine learning community, reconstruction attacks are a principal attack of concern and have been identified even in federated learning, which was designed with privacy…
Directional Privacy for Deep Learning
Pedro Faustini, Natasha Fernandes, Shakila Tonni +2
Differentially Private Stochastic Gradient Descent (DP-SGD) is a key method for applying privacy in the training of deep learning models. It applies isotropic Gaussian noise to gra…