User Tools

Site Tools


seminars:stat:april92026

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

seminars:stat:april92026 [2026/04/07 13:54] – created mhu7seminars:stat:april92026 [2026/04/07 13:54] (current) mhu7
Line 13: Line 13:
 <WRAP centeralign>**Abstract**</WRAP> <WRAP centeralign>**Abstract**</WRAP>
 Privacy auditing has emerged as a practical approach for evaluating privacy risks in machine learning models, particularly in black-box or limited-access settings where the training process is unavailable. At the same time, differential privacy provides rigorous theoretical guarantees through frameworks such as Rényi differential privacy, but these guarantees are often difficult to interpret and may not directly reflect observable privacy risks. Privacy auditing has emerged as a practical approach for evaluating privacy risks in machine learning models, particularly in black-box or limited-access settings where the training process is unavailable. At the same time, differential privacy provides rigorous theoretical guarantees through frameworks such as Rényi differential privacy, but these guarantees are often difficult to interpret and may not directly reflect observable privacy risks.
 +
 This talk first reviews the foundations of differential privacy, including composition techniques and modern privacy accounting, as well as recent advances in empirical privacy auditing, such as membership inference. Despite progress, current approaches exhibit several limitations: empirical auditing methods often produce weak or sample-inefficient signals and are sensitive to probe design and distribution mismatch, while theoretical guarantees are not directly aligned with observable privacy risks. Moreover, translating empirical results into formal guarantees may lead to substantial information loss. Motivated by these gaps, a research agenda is proposed toward bridging empirical auditing and formal privacy guarantees. The goal is to develop more robust auditing methods, more interpretable representations of privacy loss, and principled connections between empirical evidence and theoretical guarantees.  This talk first reviews the foundations of differential privacy, including composition techniques and modern privacy accounting, as well as recent advances in empirical privacy auditing, such as membership inference. Despite progress, current approaches exhibit several limitations: empirical auditing methods often produce weak or sample-inefficient signals and are sensitive to probe design and distribution mismatch, while theoretical guarantees are not directly aligned with observable privacy risks. Moreover, translating empirical results into formal guarantees may lead to substantial information loss. Motivated by these gaps, a research agenda is proposed toward bridging empirical auditing and formal privacy guarantees. The goal is to develop more robust auditing methods, more interpretable representations of privacy loss, and principled connections between empirical evidence and theoretical guarantees. 
  
seminars/stat/april92026.1775570046.txt · Last modified: by mhu7