Differential Privacy Protection for Support Vector Machines for Nonlinear Classification

Algorithm 3

DPSVM-MP.

	Input: data set , samples , attributes , privacy budget , proportional parameter .
	Output: classification accuracy with Laplace noise added.
(1)	Normalize the data set so that the features of any sample belong to the interval ;
(2)	Add Laplace noise to the training data set . The scale parameter of noise is . is the global sensitivity of the training data set. is used to represent the training data set after adding noise;
(3)	Project the low-dimensional data to the high-dimensional feature space, and the mapped feature vector is obtained;
(4)	Describe the classification decision function as ;
(5)	Substitute the inner product of vector with kernel function and obtain the function ;
(6)	Add Laplace noise to the kernel function . The scale parameter of noise is . is the global sensitivity of the kernel function. is used to represent the kernel function after adding noise;
(7)	Train the SVM model and compute the classification decision function;
(8)	Input test data and achieve the classification accuracy with Laplace noise added.