Abstract
Pre-trained encoders produce semantically rich latent embeddings, which, however, may expose unintended information through malicious inference or exploitation. We propose SEAL, a framework that mitigates embedding leakage by disrupting latent representations based on information-theoretic principles. It reduces the risk of potential misuse while enabling control led reconstruction for trusted users. SEAL learns to encode controlled perturbations by minimizing the Matrix Norm-based Quadratic Mutual Information (MQMI) functional between original and perturbed embeddings within a hyperspherical latent space. Meanwhile, a private decoder, jointly trained with the SEAL encoder, is trained to reconstruct the original data that is accessible only to authorized users under an access-controlled setting. Extensive experiments on vision and text datasets demonstrate that SEAL reduces latent leakage, weakens the effectiveness of evaluated inference attacks, and preserves reconstruction under the considered setting.
| Original language | English |
|---|---|
| Pages (from-to) | 1-34 |
| Number of pages | 34 |
| Journal | Transactions on Machine Learning Research |
| Volume | 2026 |
| Issue number | 6 |
| Publication status | Published - Jun 2026 |
Bibliographical note
Publisher Copyright:© 2026, Transactions on Machine Learning Research. All rights reserved.
Funding
This work was supported by the Research Council of Norway (RCN) through FRIPRO Grant under project number 356103 and its Centres of Excellence scheme, Integreat – Norwegian Centre for knowledge-driven machine learning under project number 332645. This work was partially funded by the RCN under grant no. 309439 and the RCN–NRF (National Research Foundation of Korea) joint project (359216, RS-2025-03522980).
| Funders | Funder number |
|---|---|
| National Research Foundation of Korea | RS-2025-03522980, 359216 |
| Norges Forskningsråd | 332645, 309439, 356103 |
Fingerprint
Dive into the research topics of 'Mitigating Embedding Leakage via Latent Disruption with Controlled Reconstruction'. Together they form a unique fingerprint.Cite this
- APA
- Author
- BIBTEX
- Harvard
- Standard
- RIS
- Vancouver