Robustness Implies Privacy in Statistical Estimation
Abstract
We study the relationship between adversarial robustness and differential privacy in high-dimensional algorithmic statistics. We give the first black-box reduction from privacy to robustness which can produce private estimators with optimal tradeoffs among sample complexity, accuracy, and privacy for a wide range of fundamental high-dimensional parameter estimation problems, including mean and covariance estimation. We show that this reduction can be implemented in polynomial time in some important special cases. In particular, using nearly-optimal polynomial-time robust estimators for the mean and covariance of high-dimensional Gaussians which are based on the Sum-of-Squares method, we design the first polynomial-time private estimators for these problems with nearly-optimal samples-accuracy-privacy tradeoffs. Our algorithms are also robust to a nearly optimal fraction of adversarially-corrupted samples.
Cite
@article{arxiv.2212.05015,
title = {Robustness Implies Privacy in Statistical Estimation},
author = {Samuel B. Hopkins and Gautam Kamath and Mahbod Majid and Shyam Narayanan},
journal= {arXiv preprint arXiv:2212.05015},
year = {2024}
}
Comments
90 pages, 2 tables. Appeared in STOC, 2023