arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2201.07317cs.CL
收藏

A Privacy-Preserving Unsupervised Domain Adaptation Framework for Clinical Text Analysis

University of Texas at Arlington(德克萨斯大学阿灵顿分校);eBay Inc.(eBay公司);RIKEN(理化学研究所);The University of Tokyo(东京大学);Cornell University(康奈尔大学);NIH(美国国立卫生研究院)

Qiyuan An, Ruijiang Li, Lin Gu, Hao Zhang, Qingyu Chen, Zhiyong Lu, Fei Wang, Yingying Zhu

英文摘要:

Unsupervised domain adaptation (UDA) generally aligns the unlabeled target domain data to the distribution of the source domain to mitigate the distribution shift problem. The standard UDA requires sharing the source data with the target, having potential data privacy leaking risks. To protect the source data's privacy, we first propose to share the source feature distribution instead of the source data. However, sharing only the source feature distribution may still suffer from the membership inference attack who can infer an individual's membership by the black-box access to the source model. To resolve this privacy issue, we further study the under-explored problem of privacy-preserving domain adaptation and propose a method with a novel differential privacy training strategy to protect the source data privacy. We model the source feature distribution by Gaussian Mixture Models (GMMs) under the differential privacy setting and send it to the target client for adaptation. The target client resamples differentially private source features from GMMs and adapts on target data with several state-of-art UDA backbones. With our proposed method, the source data provider could avoid leaking source data privacy during domain adaptation as well as reserve the utility. To evaluate our proposed method's utility and privacy loss, we apply our model on a medical report disease label classification task using two noisy challenging clinical text datasets. The results show that our proposed method can preserve source data's privacy with a minor performance influence on the text classification task.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑