Investigating Trade-offs in Utility, Fairness and Differential Privacy in Neural Networks
cs.LG, cs.AI
Submitted: 2021-02-11
Updated: 2021-02-11
Code: https://github.com/fchollet/keras
License: http://creativecommons.org/licenses/by/4.0/
The gist: To enable an ethical and legal use of machine learning algorithms, they must both be fair and protect the privacy of those whose data are being used.
Terminology
Abstract
To enable an ethical and legal use of machine learning algorithms, they must both be fair and protect the privacy of those whose data are being used. However, implementing privacy and fairness constraints might come at the cost of utility (Jayaraman & Evans, 2019; Gong et al., 2020). This paper investigates the privacy-utility-fairness trade-off in neural networks by comparing a Simple (S-NN), a Fair (F-NN), a Differentially Private (DP-NN), and a Differentially Private and Fair Neural Network (DPF-NN) to evaluate differences in performance on metrics for privacy (epsilon, delta), fairness (risk difference), and utility (accuracy). In the scenario with the highest considered privacy guarantees (epsilon = 0.1, delta = 0.00001), the DPF-NN was found to achieve better risk difference than all the other neural networks with only a marginally lower accuracy than the S-NN and DP-NN. This model is considered fair as it achieved a risk difference below the strict (0.05) and lenient (0.1) thresholds. However, while the accuracy of the proposed model improved on previous work from Xu, Yuan and Wu (2019), the risk difference was found to be worse.
Sources
- AI Fairness 360: An Extensible Toolkit for Detecting, Understanding, and Mitigating Unwanted Algorithmic Bias
- Fairness in Machine Learning: A Survey
- The Measure and Mismeasure of Fairness
- Correspondences between Privacy and Nondiscrimination: Why They Should Be Studied Together
- Evaluation of Fairness Trade-offs in Predicting Student Success
- A General Approach to Adding Differential Privacy to Iterative Training Procedures
- More Than Privacy: Applying Differential Privacy in Key Areas of Artificial Intelligence
Related papers
- Polynomial-Augmented Neural Networks (PANNs) with Weak Orthogonality Constraints for Enhanced Function and PDE Approximation
- AIRL-S: Unifying Reinforcement Learning and Search-Based Test-Time Scaling via Adversarial Inverse Reinforcement Learning
- Transformers as Bayesian In-Context Experimenters: Smoothness-Adaptive Efficient ATE Estimation
- Convergence issues in Relational Concept Analysis based on AOC-posets
- Beliefs Beyond Posteriors: Local-Consistency Optimisation for Bayesian Neural Networks
- Understanding Diffusion Models via Ratio-Based Function Approximation with SignReLU Networks