Mihail Stoian

Unified Mechanism-Specific Amplification by Subsampling and Group Privacy Amplification

Amplification by subsampling is one of the main primitives in machine learning with differential privacy (DP): Training a model on random batches instead of complete datasets results in stronger privacy. This is traditionally formalized via mechanism-agnostic subsampling guarantees that express the…