Privacy-Preserving Active Learning for precision oncology clinical workflows with inverse simulation verification

说明与用途

原型结合了联邦差分隐私、主动学习和逆向仿真验证，以训练隐私保护、可审计的精准肿瘤学模型。

问题

How to train clinically meaningful models on highly sensitive, small, non‑IID oncology datasets without exposing patient data and while providing clinicians a falsifiable audit of model behavior.

结果

Active learning combined with client‑level DP‑SGD achieved comparable AUROC to random sampling at a higher privacy budget (ε=3 vs ε=8) on a synthetic oncology benchmark, while the inverse‑simulation verifier provided a falsifiable audit of model decisions.

工作流

• 1. Deploy a central orchestrator that aggregates encrypted gradients and verification data.
• 2. Each hospital trains a local model with DP‑SGD and per‑feature‑group adaptive clipping.
• 3. Local models send encrypted gradients and acquisition scores to the orchestrator.
• 4. The orchestrator updates the global model and plans active queries for unlabeled cases.
• 5. Hospitals annotate selected cases and send labels back to the orchestrator.
• 6. The inverse‑simulation verifier reconstructs the decision boundary and checks for clinical plausibility.
• 7. The updated global model is redistributed to hospitals for the next round.

证据

The hard part was trust — specifically, how do you prove that a model trained on data it never saw actually learned something clinically meaningful?

来源

One interesting finding from my experimentation with client‑level DP: the privacy‑utility curve is flatter when you combine it with active learning.

来源

In my synthetic oncology benchmark, active learning + DP‑SGD at ε=3 matched random sampling + DP‑SGD at ε=8 on AUROC for the actionable‑variant classification task.

来源