To address the significant risks of privacy leakage, various differential privacy techniques have been incorporated into deep learning models. However, these privacy-preserving methods often result in noticeable performance degradation. To balance privacy and utility, this paper proposes the Differentially Private with Decoupled Self-Knowledge Distillation (DPDSD) method, which effectively transfers high-usability knowledge to privacy-preserving deep networks during training. Specifically, DPDSD employs a teacher-student module designed with differential privacy: intermediate checkpoints serve as the teacher network, focusing on acquiring high-usability knowledge, while the student network emphasizes privacy protection via differential privacy stochastic gradient descent. Moreover, we decouple the distillation loss into two components: the loss for the target class and the loss for the non-target classes. This process adaptively adjusts targets by merging ground-truth labels with intermediate checkpoint predictions, enabling the model to progressively enhance its informativeness throughout training. Simultaneously, through refining knowledge from the teacher, the student achieves better performance while ensuring data privacy. Finally, extensive experiments on three public datasets have demonstrated that DPDSD can effectively improve model performance in the case of ensuring rigorous data privacy.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Decoupled Self-knowledge Distillation Makes Differentially Private Deep Learning Stronger

  • Dengfeng Zhao,
  • DaXuan Xue,
  • Suyun Zhao,
  • Cuiping Li,
  • Hong Chen

摘要

To address the significant risks of privacy leakage, various differential privacy techniques have been incorporated into deep learning models. However, these privacy-preserving methods often result in noticeable performance degradation. To balance privacy and utility, this paper proposes the Differentially Private with Decoupled Self-Knowledge Distillation (DPDSD) method, which effectively transfers high-usability knowledge to privacy-preserving deep networks during training. Specifically, DPDSD employs a teacher-student module designed with differential privacy: intermediate checkpoints serve as the teacher network, focusing on acquiring high-usability knowledge, while the student network emphasizes privacy protection via differential privacy stochastic gradient descent. Moreover, we decouple the distillation loss into two components: the loss for the target class and the loss for the non-target classes. This process adaptively adjusts targets by merging ground-truth labels with intermediate checkpoint predictions, enabling the model to progressively enhance its informativeness throughout training. Simultaneously, through refining knowledge from the teacher, the student achieves better performance while ensuring data privacy. Finally, extensive experiments on three public datasets have demonstrated that DPDSD can effectively improve model performance in the case of ensuring rigorous data privacy.