Commit graph

670 commits

Author SHA1 Message Date
Galen Andrew
afe676135e Migrate lm_dpsgd_tutorial from deprecated TFP rdp_accountant to Google DP.
PiperOrigin-RevId: 446846972
2022-05-05 16:31:54 -07:00
A. Unique TensorFlower
65eadd3a02 Enable parallel processing in the Scikit-Learn models.
Add support for configuring the parallel processing backend for Scikit-Learn while setting up the attack models.

PiperOrigin-RevId: 446844669
2022-05-05 16:21:15 -07:00
A. Unique TensorFlower
7eea74a6a1 COPYBARA_INTEGRATE_REVIEW=https://github.com/tensorflow/privacy/pull/230 from npapernot:hyperparam 8835b9c4072e3e598aa49d605e7643a2c2e65988
PiperOrigin-RevId: 446832781
2022-05-05 15:38:47 -07:00
A. Unique TensorFlower
930c4d13e8 Handle the case when the data comes from a multilabel classification problem but the provided samples happen to have just one positive label per sample.
PiperOrigin-RevId: 445468067
2022-04-29 11:36:47 -07:00
Galen Andrew
e0ab480e3d Use updated Google differential_privacy library.
PiperOrigin-RevId: 445189891
2022-04-28 10:36:04 -07:00
Galen Andrew
81d5880702 Migrate accounting in tutorials to Google DP.
PiperOrigin-RevId: 444993855
2022-04-27 16:09:27 -07:00
Fabien Hertschuh
d47cc695cd Consistently import all estimator symbols via tensorflow_estimator as opposed to using tensorflow.estimator for some symbols.
PiperOrigin-RevId: 443417581
2022-04-21 10:36:59 -07:00
Yilei Yang
de585e5619 Remove unused comments related to Python 2 compatibility.
PiperOrigin-RevId: 443383047
2022-04-21 08:20:08 -07:00
Galen Andrew
868cf54470 Deprecates implementations of RDP accounting from tensorflow_privacy in favor of differential_privacy.
PiperOrigin-RevId: 443177278
2022-04-20 13:25:48 -07:00
A. Unique TensorFlower
ee35642b90 Add multi-label support for Tensorflow Privacy membership attacks.
PiperOrigin-RevId: 443176652
2022-04-20 13:23:26 -07:00
Galen Andrew
e14618fe7c Remove DpEvent from tensorflow_privacy which has been migrated to Google DP libraries.
PiperOrigin-RevId: 441490619
2022-04-13 08:40:52 -07:00
Galen Andrew
34ad9dbedc Automated rollback of commit 7e89dad685
PiperOrigin-RevId: 441245348
2022-04-12 11:34:14 -07:00
A. Unique TensorFlower
7e89dad685 Delete TF Privacy fork of the Google DP accounting API.
PiperOrigin-RevId: 440992901
2022-04-11 14:12:46 -07:00
A. Unique TensorFlower
34f8774dad Migrate more references to dp_event to Google DP libraries.
PiperOrigin-RevId: 440230682
2022-04-07 16:39:38 -07:00
A. Unique TensorFlower
676945d3a6 Migrate references to dp_event to Google DP libraries.
PiperOrigin-RevId: 440204574
2022-04-07 14:42:57 -07:00
Fabien Hertschuh
5493a3baf0 Explicitly import estimator from tensorflow as a separate import instead of
accessing it via tf.estimator and depend on the tensorflow estimator target.

PiperOrigin-RevId: 438419860
2022-03-30 16:05:01 -07:00
Fabien Hertschuh
fc2c15ab21 Explicitly import estimator from tensorflow as a separate import instead of
accessing it via tf.estimator and depend on the tensorflow estimator target.

PiperOrigin-RevId: 437818180
2022-03-28 12:00:58 -07:00
Steve Chien
70ab071e23 In dp_optimizer_keras.py, set the default value of unconnected gradients to be 'zero'.
PiperOrigin-RevId: 435759367
2022-03-18 16:10:24 -07:00
A. Unique TensorFlower
d21e492be6 [Py Accounting] Add typing annotations in RDP accounting.
PiperOrigin-RevId: 435703861
2022-03-18 12:20:03 -07:00
A. Unique TensorFlower
adde2064dd Remove dependence on six and use super() in rdp_privacy_accountant
PiperOrigin-RevId: 434668652
2022-03-14 23:24:33 -07:00
A. Unique TensorFlower
42df23eb79 Add Laplace DpEvent
PiperOrigin-RevId: 432475405
2022-03-04 10:14:36 -08:00
Shuang Song
2c65cc7910 In binary log loss for membership inference attack, allow prediction to have shape (n, 1).
PiperOrigin-RevId: 432267275
2022-03-03 13:17:49 -08:00
Shuang Song
767788e9cf Adds per-example membership scores to trained attackers.
PiperOrigin-RevId: 431615160
2022-02-28 23:52:21 -08:00
Steve Chien
a33afde0c1 Add ability to specify number of microbatches in DPModel class.
PiperOrigin-RevId: 430358084
2022-02-22 20:32:05 -08:00
Steve Chien
bfdcb7f64f Update version number to 0.8.0.
PiperOrigin-RevId: 430268000
2022-02-22 12:19:05 -08:00
Shuang Song
ec7d44237c Allow customized loss functions for membership inference attack.
PiperOrigin-RevId: 430267951
2022-02-22 12:17:56 -08:00
Peter Kairouz
39fa1d361f Add DistributedSkellamSumQuery symbol to public API.
PiperOrigin-RevId: 430261878
2022-02-22 11:52:54 -08:00
Shuang Song
12541c23d4 Fix MIA readme: labels are not needed in basic usage.
PiperOrigin-RevId: 430230630
2022-02-22 09:37:42 -08:00
Shuang Song
7d5a57f0a8 An example for running secret sharer on image classification model.
PiperOrigin-RevId: 430083697
2022-02-21 14:04:51 -08:00
Shuang Song
04dd758c8a In secret generation for secret sharer, use np.random.RandomState. Restructure generate_secrets.
PiperOrigin-RevId: 430082580
2022-02-21 13:54:09 -08:00
Peter Kairouz
89de03e0db Adds DistributedSkellamQuery to public TF Privacy.
PiperOrigin-RevId: 429664212
2022-02-18 15:48:20 -08:00
Michael Reneer
ffc29e1d82 Merge pull request #154 from jagielski:audit_pr
PiperOrigin-RevId: 429646031
2022-02-18 22:15:25 +00:00
Michael Reneer
7e0b193393 Merge pull request #185 from carlini:neuracrypt
PiperOrigin-RevId: 429632517
2022-02-18 21:10:54 +00:00
Michael Reneer
81949efda6 Merge pull request #184 from carlini:instahide
PiperOrigin-RevId: 429629817
2022-02-18 20:56:47 +00:00
Michael Reneer
661edb5214 Merge pull request #183 from carlini:better-mi
PiperOrigin-RevId: 429626329
2022-02-18 20:42:22 +00:00
Michael Reneer
69d84d1892 Add TensorFlow Privacy BUILD and WORKSPACE files.
PiperOrigin-RevId: 429141704
2022-02-16 23:30:06 +00:00
Michael Reneer
2d692bbf73 Update the direct scipy dependency to ~=1.5.0.
PiperOrigin-RevId: 429122811
2022-02-16 23:27:57 +00:00
Michael Reneer
8544af2500 Update the Python dependency for sklearn package.
PiperOrigin-RevId: 428896276
2022-02-16 23:27:43 +00:00
Shuang Song
11b4c318a2 Add links to secret sharer colab.
PiperOrigin-RevId: 428844473
2022-02-16 23:27:32 +00:00
Michael Reneer
c8a49e1039 Update the direct TensorFlow dependency to ~=2.4.
This means that we would accept a hot fix and a new minor version , but not accept major version changes without releasing TFP.

PiperOrigin-RevId: 428811702
2022-02-16 23:27:21 +00:00
Michael Reneer
8012d5b9c9 Internal
PiperOrigin-RevId: 428549678
2022-02-16 23:26:54 +00:00
Shuang Song
c8bba41059
Merge pull request #154 from jagielski/audit_pr
Add code for auditing DP-SGD
2022-02-14 13:25:50 -08:00
Shuang Song
48b3b6a51b
Merge pull request #185 from carlini/neuracrypt
Add NeuraCrypt attack code to research directory
2022-02-14 13:23:36 -08:00
Shuang Song
66338409b7
Merge pull request #184 from carlini/instahide
Add InstaHide attack code to research folder
2022-02-14 13:23:16 -08:00
Shuang Song
3d499e69ba
Merge pull request #183 from carlini/better-mi
Add research code to reproduce Membership Inference Attacks From First Principles
2022-02-14 13:21:40 -08:00
Francois Chollet
085b7ddfec Remove deprecated TF1 Layer APIs apply(), get_updates_for(), get_losses_for(), and remove the inputs argument in the add_loss() method.
PiperOrigin-RevId: 428134172
2022-02-11 18:35:49 -08:00
Shuang Song
560926ea22 Functions for advanced MIAs.
PiperOrigin-RevId: 428111799
2022-02-11 16:06:47 -08:00
Michael Reneer
13a79f419f Update the direct tensorflow-probability dependency to ~=0.15.0.
This means that we would accept a hot fix, but not accept major or minor version changes without releasing TFP.

PiperOrigin-RevId: 428025242
2022-02-11 09:52:00 -08:00
Michael Reneer
8d20ae7c3b Update the direct tensorflow-datasets dependency to ~=4.5.2.
This means that we would accept a hot fix, but not accept major or minor version changes without releasing TFP.

PiperOrigin-RevId: 428023939
2022-02-11 09:46:04 -08:00
Michael Reneer
f393322593 Automated rollback of commit 823aacb315
PiperOrigin-RevId: 428022174
2022-02-11 09:37:34 -08:00