Post

I'm excited to share this paper. It answers a question that has bugged me for a long time: Can sample-and-aggregate be made more data-efficient? The answer is yes, but at a steep price in computational efficiency. See 🧵 for more details. Also, it was a fun opportunity to add a new coauthor. 😁

Differential Privacy Papers@dppapers.bsky.social

Privately Estimating Black-Box Statistics Günter F. Steinke, Thomas Steinke http://arxiv.org/abs/2510.00322

2 reposts12 likes

First, what is sample-and-aggregate? It's a generic method for differentially private estimation. Partition your data into 1/ε subsamples; evaluate your function on each subsample; then combine the values in a ε-differentially private manner. It's flexible - it works for *any* function - but...

cs-people.bu.educs-people.bu.edu

...it's inefficient in terms of data. You only get accuracy from evaluating on a subsample & each subsample gets treated like one datapoint for the privacy analysis. In terms of sample complexity, the cost of privacy is multiplicative, when it _should_ be additive. But it can be practical e.g.:

arxiv.orgSemi-supervised Knowledge Transfer for Deep Learning from Private Training DataSome machine learning applications involve training data that is sensitive, such as the medical histories of patients in a clinical trial. A model may inadvertently and implicitly store some of its tr...

So the obvious question is *can sample-and-aggregate can be made more data-efficient?* 🤔 E.g., instead of partitioning the dataset, can we use overlapping subsamples? Unfortunately, using standard aggregation methods, this doesn't work (because overlapping subsamples means higher sensitivity).