PreservingDataMining.pptVIP

Privacy-Preserving Data Mining What is Data Mining? Information Extraction Performed on databases. Combines theory from machine learning statistical analysis database technology Finds patterns/relationships in data Trains the system to predict future results Typical applications: customer profiling fraud detection credit risk analysis. A Simple Example of Data Mining Where does privacy fit in? Data mining performed on databases Many of them contain sensitive/personal data e.g. Salary, Age, Address, Credit History Much of data mining concerned with aggregates Statistical models of many records May not require precise information from each record Is it possible to… Build a decision-tree classifier accurately without accessing actual fields from user records? (…thus protecting privacy of the user) Preserving Data Privacy (1) Value-Class Membership Discretization: values for an attribute are discretized into intervals Intervals need not be of equal width. Use the interval covering the data in computation, rather than the data itself. Example: Perhaps Adam doesn’t want people to know he makes $4000/year. Maybe he’s more comfortable saying he makes between $0 - $20,000 per year. The most often used method for hiding individual values. Preserving Data Privacy (2) Value Distortion Instead of using the actual data xi Use xi + r, where r is a random value from a distribution. Uniform Distribution r is uniformly distributed between [-α, +α] Average r is 0. Gaussian Distribution r has a normal distribution Mean μ(r) is 0. Standard_deviation(r) is σ What do we mean by “private?” If we can estimate with c% confidence The value x lies within the interval [x1, x2] Privacy = (x2 - x1), the size of the range. If we want very high privacy 2α W Value distortion methods (Uniform, Gaussian) provide more privacy than discretization at higher confidence levels. Reconstructing Original Distribution From Distorted Values (1) Define: Original data values: x1, x2, …, xn Random va