On the Risks of Collecting Multidimensional Data Under Local Differential Privacy - École polytechnique
Article Dans Une Revue Proceedings of the VLDB Endowment (PVLDB) Année : 2023

On the Risks of Collecting Multidimensional Data Under Local Differential Privacy

Résumé

The private collection of multiple statistics from a population is a fundamental statistical problem. One possible approach to realize this is to rely on the local model of differential privacy (LDP). Numerous LDP protocols have been developed for the task of frequency estimation of single and multiple attributes. These studies mainly focused on improving the utility of the algorithms to ensure the server performs the estimations accurately. In this paper, we investigate privacy threats (re-identification and attribute inference attacks) against LDP protocols for multidimensional data following two state-of-the-art solutions for frequency estimation of multiple attributes. To broaden the scope of our study, we have also experimentally assessed five widely used LDP protocols, namely, generalized randomized response, optimal local hashing, subset selection, RAPPOR and optimal unary encoding. Finally, we also proposed a countermeasure that improves both utility and robustness against the identified threats. Our contributions can help practitioners aiming to collect users' statistics privately to decide which LDP mechanism best fits their needs.
Fichier principal
Vignette du fichier
p1126-arcolezi.pdf (539.5 Ko) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte
Licence

Dates et versions

hal-04082592 , version 1 (26-04-2023)

Licence

Identifiants

Citer

Héber H. Arcolezi, Sébastien Gambs, Jean-François Couchot, Catuscia Palamidessi. On the Risks of Collecting Multidimensional Data Under Local Differential Privacy. Proceedings of the VLDB Endowment (PVLDB), 2023, 16 (5), pp.1126 - 1139. ⟨10.14778/3579075.3579086⟩. ⟨hal-04082592⟩
61 Consultations
41 Téléchargements

Altmetric

Partager

More