← Search

Hamid Javadi

7 accepted papers

2023

A Blessing of Dimensionality in Membership Inference through Regularization

AISTATS 2023poster

Is overparameterization a privacy liability? In this work, we study the effect that the number of parameters has on a classifier’s vulnerability to membership inference attacks. We first demonstrate how the number of parameters of a model can induce a privacy-utility trade-off: increasing the number…

Cited by 22SourcePDFScholar
2022

Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inference

NeurIPS 2022accept

A surprising phenomenon in modern machine learning is the ability of a highly overparameterized model to generalize well (small error on the test data) even when it is trained to memorize the training data (zero error on the training data). This has led to an arms race towards increasingly overparam…

2021

The Flip Side of the Reweighted Coin: Duality of Adaptive Dropout and Regularization

NeurIPS 2021poster

Among the most successful methods for sparsifying deep (neural) networks are those that adaptively mask the network weights throughout training. By examining this masking, or dropout, in the linear case, we uncover a duality between such adaptive methods and regularization through the so-called “η-t…

2020

The Implicit Regularization of Ordinary Least Squares Ensembles

AISTATS 2020poster

Ensemble methods that average over a collection of independent predictors that are each limited to a subsampling of both the examples and features of the training data command a significant presence in machine learning, such as the ever-popular random forest, yet the nature of the subsampling effect…

2018

Porcupine Neural Networks: Approximating Neural Network Landscapes

NeurIPS 2018poster

Neural networks have been used prominently in several machine learning and statistics applications. In general, the underlying optimization of neural networks is non-convex which makes analyzing their performance challenging. In this paper, we take another approach to this problem by constraining th…