Commit graph

378 commits

Author SHA1 Message Date
Galen Andrew
bb1b7a6a46 Remove deprecated rdp_accountant. Please use RdpAccountant from the differential_privacy library.
PiperOrigin-RevId: 454964256
2022-06-14 15:02:34 -07:00
Galen Andrew
c4fea75675 Remove differential_privacy dp_event classes from TFP top-level symbols.
PiperOrigin-RevId: 454238513
2022-06-10 14:09:46 -07:00
Galen Andrew
125f82707a Migrate dependency of tree_aggregation_accountant_test on rdp_accountant to differential_privacy.
PiperOrigin-RevId: 453989532
2022-06-09 12:44:20 -07:00
Matthew Jagielski
6c0cc858e0 Add word2vec attack example to attack library.
PiperOrigin-RevId: 453489150
2022-06-07 11:46:55 -07:00
A. Unique TensorFlower
7d522e9273 Remove an indentation in a comment.
PiperOrigin-RevId: 451008704
2022-05-25 14:01:16 -07:00
A. Unique TensorFlower
5461f911a6 Bugfixes:
1. Child classes of 'TrainedAttacker' now have a 'backend' parameter, so require an __init__() method.

PiperOrigin-RevId: 451005298
2022-05-25 13:46:30 -07:00
A. Unique TensorFlower
95e527acfb Support models with unconnected layers and gradients when training using a DP vectorized optimizer.
PiperOrigin-RevId: 450659644
2022-05-24 05:36:58 -07:00
Steve Chien
f739f45299 Add .bazelversion file.
PiperOrigin-RevId: 448082134
2022-05-11 14:14:48 -07:00
A. Unique TensorFlower
65eadd3a02 Enable parallel processing in the Scikit-Learn models.
Add support for configuring the parallel processing backend for Scikit-Learn while setting up the attack models.

PiperOrigin-RevId: 446844669
2022-05-05 16:21:15 -07:00
A. Unique TensorFlower
7eea74a6a1 COPYBARA_INTEGRATE_REVIEW=https://github.com/tensorflow/privacy/pull/230 from npapernot:hyperparam 8835b9c4072e3e598aa49d605e7643a2c2e65988
PiperOrigin-RevId: 446832781
2022-05-05 15:38:47 -07:00
A. Unique TensorFlower
930c4d13e8 Handle the case when the data comes from a multilabel classification problem but the provided samples happen to have just one positive label per sample.
PiperOrigin-RevId: 445468067
2022-04-29 11:36:47 -07:00
Galen Andrew
81d5880702 Migrate accounting in tutorials to Google DP.
PiperOrigin-RevId: 444993855
2022-04-27 16:09:27 -07:00
Fabien Hertschuh
d47cc695cd Consistently import all estimator symbols via tensorflow_estimator as opposed to using tensorflow.estimator for some symbols.
PiperOrigin-RevId: 443417581
2022-04-21 10:36:59 -07:00
Galen Andrew
868cf54470 Deprecates implementations of RDP accounting from tensorflow_privacy in favor of differential_privacy.
PiperOrigin-RevId: 443177278
2022-04-20 13:25:48 -07:00
A. Unique TensorFlower
ee35642b90 Add multi-label support for Tensorflow Privacy membership attacks.
PiperOrigin-RevId: 443176652
2022-04-20 13:23:26 -07:00
Galen Andrew
e14618fe7c Remove DpEvent from tensorflow_privacy which has been migrated to Google DP libraries.
PiperOrigin-RevId: 441490619
2022-04-13 08:40:52 -07:00
Galen Andrew
34ad9dbedc Automated rollback of commit 7e89dad685
PiperOrigin-RevId: 441245348
2022-04-12 11:34:14 -07:00
A. Unique TensorFlower
7e89dad685 Delete TF Privacy fork of the Google DP accounting API.
PiperOrigin-RevId: 440992901
2022-04-11 14:12:46 -07:00
A. Unique TensorFlower
34f8774dad Migrate more references to dp_event to Google DP libraries.
PiperOrigin-RevId: 440230682
2022-04-07 16:39:38 -07:00
A. Unique TensorFlower
676945d3a6 Migrate references to dp_event to Google DP libraries.
PiperOrigin-RevId: 440204574
2022-04-07 14:42:57 -07:00
Fabien Hertschuh
5493a3baf0 Explicitly import estimator from tensorflow as a separate import instead of
accessing it via tf.estimator and depend on the tensorflow estimator target.

PiperOrigin-RevId: 438419860
2022-03-30 16:05:01 -07:00
Fabien Hertschuh
fc2c15ab21 Explicitly import estimator from tensorflow as a separate import instead of
accessing it via tf.estimator and depend on the tensorflow estimator target.

PiperOrigin-RevId: 437818180
2022-03-28 12:00:58 -07:00
Steve Chien
70ab071e23 In dp_optimizer_keras.py, set the default value of unconnected gradients to be 'zero'.
PiperOrigin-RevId: 435759367
2022-03-18 16:10:24 -07:00
A. Unique TensorFlower
d21e492be6 [Py Accounting] Add typing annotations in RDP accounting.
PiperOrigin-RevId: 435703861
2022-03-18 12:20:03 -07:00
A. Unique TensorFlower
adde2064dd Remove dependence on six and use super() in rdp_privacy_accountant
PiperOrigin-RevId: 434668652
2022-03-14 23:24:33 -07:00
A. Unique TensorFlower
42df23eb79 Add Laplace DpEvent
PiperOrigin-RevId: 432475405
2022-03-04 10:14:36 -08:00
Shuang Song
2c65cc7910 In binary log loss for membership inference attack, allow prediction to have shape (n, 1).
PiperOrigin-RevId: 432267275
2022-03-03 13:17:49 -08:00
Shuang Song
767788e9cf Adds per-example membership scores to trained attackers.
PiperOrigin-RevId: 431615160
2022-02-28 23:52:21 -08:00
Steve Chien
a33afde0c1 Add ability to specify number of microbatches in DPModel class.
PiperOrigin-RevId: 430358084
2022-02-22 20:32:05 -08:00
Steve Chien
bfdcb7f64f Update version number to 0.8.0.
PiperOrigin-RevId: 430268000
2022-02-22 12:19:05 -08:00
Shuang Song
ec7d44237c Allow customized loss functions for membership inference attack.
PiperOrigin-RevId: 430267951
2022-02-22 12:17:56 -08:00
Peter Kairouz
39fa1d361f Add DistributedSkellamSumQuery symbol to public API.
PiperOrigin-RevId: 430261878
2022-02-22 11:52:54 -08:00
Shuang Song
12541c23d4 Fix MIA readme: labels are not needed in basic usage.
PiperOrigin-RevId: 430230630
2022-02-22 09:37:42 -08:00
Shuang Song
7d5a57f0a8 An example for running secret sharer on image classification model.
PiperOrigin-RevId: 430083697
2022-02-21 14:04:51 -08:00
Shuang Song
04dd758c8a In secret generation for secret sharer, use np.random.RandomState. Restructure generate_secrets.
PiperOrigin-RevId: 430082580
2022-02-21 13:54:09 -08:00
Peter Kairouz
89de03e0db Adds DistributedSkellamQuery to public TF Privacy.
PiperOrigin-RevId: 429664212
2022-02-18 15:48:20 -08:00
Michael Reneer
69d84d1892 Add TensorFlow Privacy BUILD and WORKSPACE files.
PiperOrigin-RevId: 429141704
2022-02-16 23:30:06 +00:00
Shuang Song
11b4c318a2 Add links to secret sharer colab.
PiperOrigin-RevId: 428844473
2022-02-16 23:27:32 +00:00
Francois Chollet
085b7ddfec Remove deprecated TF1 Layer APIs apply(), get_updates_for(), get_losses_for(), and remove the inputs argument in the add_loss() method.
PiperOrigin-RevId: 428134172
2022-02-11 18:35:49 -08:00
Shuang Song
560926ea22 Functions for advanced MIAs.
PiperOrigin-RevId: 428111799
2022-02-11 16:06:47 -08:00
Francois Chollet
cd38172f35 Remove usage of deprecated layer method.
PiperOrigin-RevId: 427339701
2022-02-08 17:45:45 -08:00
Michael Reneer
bb153c1f9d Internal
PiperOrigin-RevId: 427327078
2022-02-08 16:44:37 -08:00
Michael Reneer
28db674240 Ensure that TF 1.0 API is referenced at the call site in TensorFlow Privacy.
This change makes it easy to search for usage of TF 1.0 API and updates the TF imports across TFP to be written consistently.

PiperOrigin-RevId: 427043028
2022-02-07 16:06:22 -08:00
Shuang Song
ceced43d0b For seq2seq MIA test, call threshold attacker directly.
PiperOrigin-RevId: 426941426
2022-02-07 09:46:03 -08:00
Zheng Xu
2fe51d2eeb Minor fix of tree aggregation accounting docstring.
PiperOrigin-RevId: 426398939
2022-02-04 07:32:22 -08:00
Michael Reneer
c3e7f08fa5 Update to import TF 2.0 in many TensorFlow Privacy Python modules.
PiperOrigin-RevId: 425901093
2022-02-02 09:17:30 -08:00
Michael Reneer
778c804d1b Delete unused TF 1.0 API in TensorFlow Privacy.
PiperOrigin-RevId: 425900761
2022-02-02 09:16:06 -08:00
Zheng Xu
6fde7b0480 Add clearer connection of TFP tree aggregation query and accounting arguments.
PiperOrigin-RevId: 425790945
2022-02-01 21:34:37 -08:00
Michael Reneer
8a6827b27c Update to use TF 2.0 API in TensorFlow Privacy:
tf.logging -> Removed for absl
tf.assert_type -> tf.debugging.assert_type
tf.assert_less_equal -> tf.debugging.assert_less_equal
tf.global_norm -> tf.linalg.global_norm

PiperOrigin-RevId: 425730344
2022-02-01 15:29:09 -08:00
Shuang Song
438da5a09b For secret sharer exposures, allow more dictionary key types, and break ties for the same perplexities. Fix a bug in the test.
PiperOrigin-RevId: 425446829
2022-01-31 13:27:55 -08:00