arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2602.06110cs.LGcs.CRquant-ph
收藏

具有量子启发张量列车模型的隐私和可解释性临床预测

Private and interpretable clinical prediction with quantum-inspired tensor train models

José Ramón Pareja Monturiol, Juliette Sinnott, Roger G. Melko, Mohammad Kohandel

AI总结:

本文提出基于量子启发张量列车模型的隐私保护和可解释性临床预测方法,通过实验展示其在提升模型隐私性和可解释性方面的有效性。

摘要:

在临床环境中,机器学习必须在预测准确性、可解释性和隐私之间取得平衡。像逻辑回归(LR)这样的模型提供透明性,而神经网络(NNs)则提供更强的预测能力;然而,两者都容易受到隐私攻击。我们通过设计攻击来评估这些风险,以确定在不同级别的对抗访问下,哪些公开数据集被用于训练模型,将这些攻击应用于LORIS,一个公开可用的LR模型,用于免疫治疗反应预测,以及用于相同任务的其他浅层NN模型。我们的结果表明,这两种模型都泄露了大量训练集信息,其中LR在白盒场景中尤其脆弱。此外,我们观察到在LR中常见的交叉验证实践加剧了这些风险。为了缓解这些漏洞,我们提出了一种基于张量列车(TTs)的量子启发防御方法,将离散化模型张量化,这在不牺牲准确性的情况下完全混淆了参数,将白盒攻击减少到随机猜测,并使黑盒攻击的破坏程度与差分隐私相当。TT模型保留了LR的可解释性,并通过高效计算边际和条件分布扩展了这种可解释性,同时为NNs提供了更高层次的可解释性。我们的结果表明,张量化具有广泛的应用性,并为隐私、可解释和有效的临床预测建立了实用的基础。

英文摘要:

Publicly available clinical machine learning models pose an underappreciated privacy risk: their parameters or outputs can be exploited to recover information from patients whose data were used during training. Moreover, this risk is exacerbated by models such as logistic regression (LR), which are typically preferred in clinical settings for their transparency. To assess this empirically, we attack LORIS, a publicly available LR model for immunotherapy response prediction hosted on a U.S. government website. From evaluations through its public interface, we recover the model parameters and identify the training cohort with high confidence. More broadly, we design cohort-level membership inference attacks under three levels of adversarial access---binary black-box, continuous black-box, and white-box---and apply them to both LR models and shallow neural networks (NNs) trained on the same task. Our results reveal that even a cohort of 35 patients can be reliably identified within training sets of hundreds to thousands, and that common practices such as cross-validation amplify rather than mitigate this risk. To address these vulnerabilities, we propose a quantum-inspired defense based on tensorizing discretized models into tensor trains (TTs). This representation obfuscates model parameters and preserves accuracy, while offering black-box protection comparable to practical Differential Privacy baselines. Additionally, the TT representations retain LR interpretability and extend it through efficient computation of marginal and conditional distributions, enabling this richer analysis also for black-box models such as NNs. Our results establish tensorization as a practical, post-hoc tool for private, interpretable, and effective clinical prediction.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑