Auditing Data Provenance (ADP), i.e., auditing if a certain piece of data has
been used to train a machine learning model, is an important problem in data
provenance. The feasibility of the task has been demonstrated by existing
auditing techniques, e.g., shadow auditing methods, under certain conditions
such as the availability of label information and the knowledge of training
protocols for the target model. Unfortunately, both of these conditions are
often unavailable in real applications. In this paper, we introduce Data
Provenance via Differential Auditing (DPDA), a practical framework for auditing
data provenance with a different approach based on statistically significant
differentials, i.e., after carefully designed transformation, perturbed input
data from the target model's training set would result in much more drastic
changes in the output than those from the model's non-training set. This
framework allows auditors to distinguish training data from non-training ones
without the need of training any shadow models with the help of labeled output
data. Furthermore, we propose two effective auditing function implementations,
an additive one and a multiplicative one. We report evaluations on real-world
data sets demonstrating the effectiveness of our proposed auditing technique.

本文提出了一种基于统计显著性的差异性审计框架（DPDA），用于审计数据纪录来源，使审计员能够在不需要训练阴影模型的情况下，区分训练数据和非训练数据。此外，该文还提出了两种有效的审计函数实现，并在现实世界的数据集上进行了评估，证明了该技术的有效性。