Equation 17 · Part 1 · How Training Data and Synthetic Data Actually Work
Symbol varepsilon
What this part means
a number a data controller chooses and can disclose, and a smaller buys a stronger guarantee at the cost of more injected noise and correspondingly lower utility in the resulting synthetic data or model [ 9 ].
Its job in the formula
varepsilon is a part of this expression. Its role is fixed by the surrounding article and by the operations shown in the formula.
Where the article explains it
This is the load-bearing distinction between “privacy-preserving” as a marketing description and as an engineering guarantee: is a number a data controller chooses and can disclose, and a smaller buys a stronger guarantee at the cost of more injected noise and correspondingly lower utility in the resulting synthetic data or model [ 9 ] .
The passage around this formula
Vendor assertion, clearly marked as such, versus the underlying fact: a product description that says a synthetic dataset is “privacy-preserving” is not by itself verifiable; a disclosed value, together with the mechanism used to enforce it, is the artifact that makes the claim checkable. Extraction attacks of the kind Carlini and colleagues demonstrated against GPT-2 are precisely the attack differential privacy is designed to bound the success rate of — but a system without a disclosed, enforced privacy budget offers no comparable guarantee at all, whatever language is used to describe it [ 3 , 9 ] .
Learn the underlying idea
A variable is a named place for a value. Its letter is a local label: x can mean position in one formula and a data point in another.
Open the illustrated variables: a letter stands for a value guide →
See this notation across published equations →
Sources cited in the article section
These citations provide research context; check each source for the exact claim it supports.