Tensorization of neural networks for improved privacy and interpretability
José Ramón Pareja Monturiol, Alejandro Pozas-Kerstjens, David Pérez-García
TL;DR
The paper addresses the privacy and interpretability challenges of neural networks by introducing TT-RSS, a Tensor Train via Recursive Sketching from Samples that builds a TT representation from black-box function evaluations using a small pivot set. It extends to continuous functions, relates to TT-CI, and provides core mechanisms (SketchForming, Sketching, Trimming, SystemForming, Solving) to recover TT cores efficiently. The authors demonstrate TT-RSS’s utility through privacy defenses (Private-TT), AKLT state reconstruction for SPT-phase order parameters, and initialization/compression benefits, along with performance on synthetic tensors and neural networks. The work has practical impact by enabling privacy-preserving, interpretable, and initialization-friendly tensorized representations, with potential for extension to higher-dimensional data and broader TN layouts. Overall, TT-RSS offers a scalable pathway to harness tensor networks for machine learning while preserving the black-box convenience of NN models.
Abstract
We present a tensorization algorithm for constructing tensor train representations of functions, drawing on sketching and cross interpolation ideas. The method only requires black-box access to the target function and a small set of sample points defining the domain of interest. Thus, it is particularly well-suited for machine learning models, where the domain of interest is naturally defined by the training dataset. We show that this approach can be used to enhance the privacy and interpretability of neural network models. Specifically, we apply our decomposition to (i) obfuscate neural networks whose parameters encode patterns tied to the training data distribution, and (ii) estimate topological phases of matter that are easily accessible from the tensor train representation. Additionally, we show that this tensorization can serve as an efficient initialization method for optimizing tensor trains in general settings, and that, for model compression, our algorithm achieves a superior trade-off between memory and time complexity compared to conventional tensorization methods of neural networks.
