Differentially Private Video Activity Recognition

TL;DR

This paper introduces Multi-Clip DP-SGD, a novel method for applying differential privacy to video activity recognition, achieving high accuracy while maintaining privacy on large-scale video datasets.

Contribution

The paper proposes a clip-based differential privacy training framework and a transfer learning strategy to enable scalable, private video activity recognition.

Findings

Achieves 81% accuracy on UCF-101 with epsilon=5.

76% improvement over naive DP-SGD application.

Transfer learning enhances private image classification across multiple datasets.

Abstract

In recent years, differential privacy has seen significant advancements in image classification; however, its application to video activity recognition remains under-explored. This paper addresses the challenges of applying differential privacy to video activity recognition, which primarily stem from: (1) a discrepancy between the desired privacy level for entire videos and the nature of input data processed by contemporary video architectures, which are typically short, segmented clips; and (2) the complexity and sheer size of video datasets relative to those in image classification, which render traditional differential privacy methods inadequate. To tackle these issues, we propose Multi-Clip DP-SGD, a novel framework for enforcing video-level differential privacy through clip-based classification models. This method samples multiple clips from each video, averages their gradients, and applies gradient clipping in DP-SGD without incurring additional privacy loss. Moreover, we incorporate a parameter-efficient transfer learning strategy to make the model scalable for large-scale video datasets. Through extensive evaluations on the UCF-101 and HMDB-51 datasets, our approach exhibits impressive performance, achieving 81% accuracy with a privacy budget of epsilon=5 on UCF-101, marking a 76% improvement compared to a direct application of DP-SGD. Furthermore, we demonstrate that our transfer learning strategy is versatile and can enhance differentially private image classification across an array of datasets including CheXpert, ImageNet, CIFAR-10, and CIFAR-100.