Shuchi- Chawla,- Cynthia- Dwork,- Frank- Mc- Sherry,- Adam- Smith,课件.pptVIP

* * * * * * Shuchi Chawla Shuchi Chawla, Cynthia Dwork, Frank McSherry, Adam Smith, Larry Stockmeyer, Hoeteck Wee From Idiosyncratic to Stereotypical: Toward Privacy in Public Databases * Database Privacy Census data – a prototypical example Individuals provide information Census bureau publishes sanitized records Privacy is legally mandated; what utility can we achieve? Our Goal: What do we mean by preservation of privacy? Characterize the trade-off between privacy and utility – disguise individual identifying information – preserve macroscopic properties Develop a “good” sanitizing procedure with theoretical guarantees * An outline of this talk A mathematical formalism What do we mean by privacy? Prior work An abstract model of datasets Isolation; Good sanitizations A candidate sanitization A brief overview of results General argument for privacy of n-point datasets Open issues and concluding remarks * Privacy… a philosophical view-point [Ruth Gavison] … includes protection from being brought to the attention of others … Matches intuition; inherently desirable Attention invites further loss of privacy Privacy is assured to the extent that one blends in with the crowd Appealing definition; can be converted into a precise mathematical statement! * Database Privacy Statistical approaches Alter the frequency (PRAN/DS/PERT) of particular features, while preserving means. Additionally, erase values that reveal too much Query-based approaches involve a permanent trusted third party Query monitoring: dissallow queries that breach privacy Perturbation: Add noise to the query output [Dinur Nissim’03, Dwork Nissim’04] Statistical perturbation + adversarial analysis [Evfimievsky et al ’03] combine statistical techniques with analysis similar to query-based approaches * Everybody’s First Suggestion Learn the distribution, then output: A description of the distribution, or, Samples from the learned distribution Want to re