Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Youjia Yang

dblp:328/9129 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Language models and text generation · 100%
Network and information security
1 paper
Security and privacy of machine learning · 77% Privacy and data protection · 23%

Topics — the 3 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Natural language and speech › Language models and text generation
large language model inference
0.812024
Split-and-Denoise: Protect large language model inference with local differential privacy · ICML 2024
Natural language and speech › Language models and text generation › trustworthy language model
privacy-preserving inference
0.812024
Split-and-Denoise: Protect large language model inference with local differential privacy · ICML 2024
Security and privacy of machine learning
privacy-preserving inference
0.812024
Split-and-Denoise: Protect large language model inference with local differential privacy · ICML 2024

Methods — techniques the papers use, named apart from their topics

split inference · 1.5local differential privacy · 1.5embedding denoising · 1.5
YearPublicationVenuePosition
2024 Split-and-Denoise: Protect large language model inference with local differential privacy
abstract
Large Language Models (LLMs) excel in natural language understanding by capturing hidden semantics in vector space. This process enriches the value of text embeddings for various downstream tasks, thereby fostering the Embedding-as-a-Service (EaaS) business model. However, the risk of privacy leakage due to direct text transmission to servers remains a critical concern. To address this, we introduce Split-N-Denoise (SnD), an private inference framework that splits the model to execute the token embedding layer on the client side at minimal computational cost. This allows the client to introduce noise prior to transmitting the embeddings to the server, and subsequently receive and denoise the perturbed output embeddings for downstream tasks. Our approach is designed for the inference stage of LLMs and requires no modifications to the model parameters. Extensive experiments demonstrate SnD’s effectiveness in optimizing the privacy-utility tradeoff across various LLM architectures and diverse downstream tasks. The results reveal an improvement in performance under the same privacy budget compared to the baselines by over 10% on average, offering clients a privacy-preserving solution for local privacy protection.
Peihua Mai, Youjia Yang
ICML4