{"id":"https://openalex.org/W4225466681","doi":"https://doi.org/10.1109/tifs.2022.3169911","title":"A Differentially Private Framework for Deep Learning With Convexified Loss Functions","display_name":"A Differentially Private Framework for Deep Learning With Convexified Loss Functions","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4225466681","doi":"https://doi.org/10.1109/tifs.2022.3169911"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2022.3169911","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3169911","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2204.01049","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012305916","display_name":"Zhigang L\u00fc","orcid":"https://orcid.org/0000-0001-5102-6217"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhigang Lu","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5102-6217","affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049859678","display_name":"Hassan Jameel Asghar","orcid":"https://orcid.org/0000-0001-6168-6497"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hassan Jameel Asghar","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040251515","display_name":"Mohamed Ali K\u00e2afar","orcid":"https://orcid.org/0000-0003-2714-0276"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohamed Ali Kaafar","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-2714-0276","affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082582353","display_name":"Darren Webb","orcid":null},"institutions":[{"id":"https://openalex.org/I1303474014","display_name":"Defence Science and Technology Group","ror":"https://ror.org/05ddrvt52","country_code":"AU","type":"government","lineage":["https://openalex.org/I1303474014","https://openalex.org/I2801453606","https://openalex.org/I3139952251"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Darren Webb","raw_affiliation_strings":["Cyber and Electronic Warfare Division, Defence Science and Technology Group, Edinburgh, SA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber and Electronic Warfare Division, Defence Science and Technology Group, Edinburgh, SA, Australia","institution_ids":["https://openalex.org/I1303474014"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056478866","display_name":"Peter Dickinson","orcid":null},"institutions":[{"id":"https://openalex.org/I1303474014","display_name":"Defence Science and Technology Group","ror":"https://ror.org/05ddrvt52","country_code":"AU","type":"government","lineage":["https://openalex.org/I1303474014","https://openalex.org/I2801453606","https://openalex.org/I3139952251"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Peter Dickinson","raw_affiliation_strings":["Cyber and Electronic Warfare Division, Defence Science and Technology Group, Edinburgh, SA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber and Electronic Warfare Division, Defence Science and Technology Group, Edinburgh, SA, Australia","institution_ids":["https://openalex.org/I1303474014"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.834,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.87163983,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"17","issue":null,"first_page":"2151","last_page":"2165"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9646999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7433791160583496},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.5832279324531555},{"id":"https://openalex.org/keywords/stochastic-gradient-descent","display_name":"Stochastic gradient descent","score":0.566036581993103},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.5402398705482483},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.5359922647476196},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4885810315608978},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.48348408937454224},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4659966230392456},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.4221495985984802},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4039592146873474},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.393224835395813},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3415473401546478},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.32788601517677307},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1731034219264984}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7433791160583496},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.5832279324531555},{"id":"https://openalex.org/C206688291","wikidata":"https://www.wikidata.org/wiki/Q7617819","display_name":"Stochastic gradient descent","level":3,"score":0.566036581993103},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.5402398705482483},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.5359922647476196},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4885810315608978},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.48348408937454224},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4659966230392456},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.4221495985984802},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4039592146873474},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.393224835395813},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3415473401546478},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.32788601517677307},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1731034219264984},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tifs.2022.3169911","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3169911","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2204.01049","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2204.01049","pdf_url":"https://arxiv.org/pdf/2204.01049","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:researchonline.jcu.edu.au:77405","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4377196350","display_name":"ResearchOnline - JCU (James Cook University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I86467917","host_organization_name":"James Cook University","host_organization_lineage":["https://openalex.org/I86467917"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2204.01049","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2204.01049","pdf_url":"https://arxiv.org/pdf/2204.01049","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","score":0.44999998807907104,"id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320320591","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W607505555","https://openalex.org/W1513807349","https://openalex.org/W1557833142","https://openalex.org/W1873763122","https://openalex.org/W2027595342","https://openalex.org/W2099471712","https://openalex.org/W2123820077","https://openalex.org/W2130325614","https://openalex.org/W2140613141","https://openalex.org/W2162379889","https://openalex.org/W2167967601","https://openalex.org/W2473418344","https://openalex.org/W2520442116","https://openalex.org/W2535690855","https://openalex.org/W2594311007","https://openalex.org/W2729742878","https://openalex.org/W2785361959","https://openalex.org/W2795435272","https://openalex.org/W2804900738","https://openalex.org/W2903389359","https://openalex.org/W2930926105","https://openalex.org/W2943912735","https://openalex.org/W2950943617","https://openalex.org/W2953310471","https://openalex.org/W2963378725","https://openalex.org/W2963699739","https://openalex.org/W2963999993","https://openalex.org/W2998142440","https://openalex.org/W3010177353","https://openalex.org/W3103245149","https://openalex.org/W3113374047","https://openalex.org/W4212774754","https://openalex.org/W4213278605","https://openalex.org/W4234281613","https://openalex.org/W4236362309","https://openalex.org/W4287867418","https://openalex.org/W4288563649","https://openalex.org/W4320013936","https://openalex.org/W6677855611","https://openalex.org/W6680570851","https://openalex.org/W6684426766","https://openalex.org/W6747732332","https://openalex.org/W6752346538","https://openalex.org/W6763736615","https://openalex.org/W6765807149","https://openalex.org/W6773676928"],"related_works":["https://openalex.org/W4361791424","https://openalex.org/W4206903459","https://openalex.org/W2754816816","https://openalex.org/W4366280654","https://openalex.org/W3160167280","https://openalex.org/W4231621013","https://openalex.org/W4362706668","https://openalex.org/W3008318776","https://openalex.org/W2041416246","https://openalex.org/W3020853991"],"abstract_inverted_index":{"Differential":[0],"privacy":[1,11,216,254,273],"(DP)":[2],"has":[3],"been":[4],"applied":[5],"in":[6,78,97],"deep":[7,80],"learning":[8,81],"for":[9,283],"preserving":[10],"of":[12,40,59,103,112,121,145,188,287],"the":[13,29,38,50,56,60,104,113,118,122,127,142,146,160,181,185,203,215,228,249],"underlying":[14],"training":[15],"sets.":[16],"Existing":[17],"DP":[18,26,35,47,173],"practice":[19],"falls":[20],"into":[21,28,37,49,175],"three":[22,67],"categories\u2014objective":[23],"perturbation":[24,33,45,77,85,106,169],"(injecting":[25,34,46],"noise":[27,36,48,96,128,162,174],"objective":[30,73,76],"function),":[31],"gradient":[32,41,84,233],"process":[39],"descent)":[42],"and":[43,214,227],"output":[44,105,168,186],"trained":[51,61,123,194],"neural":[52,192],"networks,":[53],"scaled":[54],"by":[55,171,207],"global":[57,119,143,156],"sensitivity":[58,120,144],"model":[62,124,147],"parameters).":[63],"They":[64],"suffer":[65],"from":[66],"main":[68],"problems.":[69],"First,":[70],"conditions":[71],"on":[72,117,141,154,237],"functions":[74],"limit":[75],"general":[79],"tasks.":[82],"Second,":[83],"does":[86],"not":[87,109],"achieve":[88],"a":[89,137,150,166,176,189,196,262,284],"satisfactory":[90],"privacy-utility":[91,204,264],"trade-off":[92,265],"due":[93],"to":[94,158,210],"over-injected":[95],"each":[98],"epoch.":[99],"Third,":[100],"high":[101],"utility":[102],"method":[107],"is":[108],"guaranteed":[110],"because":[111],"loose":[114],"upper":[115,139],"bound":[116,140],"parameters":[125],"as":[126],"scale":[129],"parameter.":[130],"To":[131],"address":[132],"these":[133],"problems,":[134],"we":[135,164],"analyse":[136],"tighter":[138],"parameters.":[148],"Under":[149],"black-box":[151,219],"setting,":[152],"based":[153],"this":[155],"sensitivity,":[157],"control":[159],"overall":[161,272],"injection,":[163],"propose":[165],"novel":[167],"framework":[170,226,260],"injecting":[172],"randomly":[177],"sampled":[178],"neuron":[179],"(via":[180],"exponential":[182],"mechanism)":[183],"at":[184],"layer":[187],"baseline":[190,211,250],"non-private":[191,212],"network":[193],"with":[195],"convexified":[197],"loss":[198,209],"function.":[199],"We":[200],"empirically":[201],"compare":[202],"trade-off,":[205],"measured":[206],"accuracy":[208],"models":[213,251],"leakage":[217,255],"against":[218],"membership":[220],"inference":[221],"(MI)":[222],"attacks,":[223,258],"between":[224],"our":[225,259],"open-source":[229],"differentially":[230],"private":[231],"stochastic":[232],"descent":[234],"(DP-SGD)":[235],"approaches":[236],"six":[238],"commonly":[239],"used":[240],"real-world":[241],"datasets.":[242],"The":[243],"experimental":[244],"evaluations":[245],"show":[246],"that,":[247],"when":[248],"have":[252],"observable":[253],"under":[256],"MI":[257],"achieves":[261],"better":[263],"than":[266],"existing":[267],"DP-SGD":[268],"implementations,":[269],"given":[270],"an":[271],"budget":[274],"<inline-formula":[275],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[276],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[277],"<tex-math":[278],"notation=\"LaTeX\">$\\epsilon":[279],"\\leq":[280],"1$":[281],"</tex-math></inline-formula>":[282],"large":[285],"number":[286],"queries.":[288]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-10T00:00:00"}