TC: Medium: Putting Differential Privacy To Work

TC：Medium：让差异隐私发挥作用

• 批准号: 1065060
• 负责人: Benjamin Pierce
• 金额: $ 120万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-03-15 至 2017-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1065060&HistoricalAwards=false
• 关键词: TC; Medium; Putting; Differential; Privacy

A wealth of data about individuals is constantly accumulating in various databases in the form of medical records, social network graphs, mobility traces in cellular networks, search logs, and movie ratings, to name only a few. There are many valuable uses for such datasets, but it is difficult to realize these uses while protecting privacy. Even when data collectors try to protect the privacy of their customers by releasing anonymized or aggregated data, this data often reveals much more information than intended. To reliably prevent such privacy violations, we need to replace the current ad-hoc solutions with a principled data release mechanism that offers strong, provable privacy guarantees. Recent research on DIFFERENTIAL PRIVACY has brought us a big step closer to achieving this goal. Differential privacy allows us to reason formally about what an adversary could learn from released data, while avoiding the need for many assumptions (e.g. about what an adversary might already know), the failure of which have been the cause of privacy violations in the past. However, despite its great promise, differential privacy is still rarely used in practice. Proving that a given computation can be performed in a differentially private way requires substantial manual effort by experts in the field, which prevents it from scaling in practice. This project aims to put differential privacy to work---to build a system that supports differentially private data analysis, can be used by the average programmer, and is general enough to be used in a wide variety of applications. Such a system could be used pervasively and make strong privacy guarantees a standard feature wherever sensitive data is being released or analyzed. Specific contributions will include ENRICHING THE FUNDAMENTAL MODEL OF DIFFERENTIAL PRIVACY to address practical issues such as data with inherent correlations, increased accuracy, privacy of functions, or privacy for streaming data; DEVELOPING A DIFFERENTIALLY PRIVATE PROGRAMMING LANGUAGE, along with a compiler that can automatically prove programs in this language to be differentially private, and a runtime system that is hardened against side-channel attacks; and SHOWING HOW TO APPLY DIFFERENTIAL PRIVACY IN A DISTRIBUTED SETTING in which the private data is spread across many databases in different administrative domains, with possible overlaps, heterogeneous schemata, and different expectations of privacy. The long-term goal is to combine ideas from differential privacy, programming languages, and distributed systems to make data analysis techniques with strong, provable privacy guarantees practical for general use. The themes of differential privacy are also being integrated into Penn's new undergraduate curriculum on Market and Social Systems Engineering.

关于个人的大量数据以医疗记录、社交网络图、蜂窝网络中的移动轨迹、搜索日志和电影评级等形式不断积累在各种数据库中。这些数据集有许多有价值的用途，但在保护隐私的同时很难实现这些用途。即使数据收集者试图通过发布匿名或聚合数据来保护其客户的隐私，这些数据也往往会泄露比预期更多的信息。为了可靠地防止这种隐私侵犯，我们需要用一种有原则的数据发布机制来取代目前的临时解决方案，这种机制提供了强大的、可证明的隐私保证。最近对差异隐私的研究使我们向实现这一目标迈出了一大步。差分隐私允许我们正式推理对手可以从发布的数据中学习到什么，同时避免需要许多假设（例如对手可能已经知道什么），这些假设的失败是过去侵犯隐私的原因。然而，尽管有很大的希望，差分隐私在实践中仍然很少使用。要证明一个给定的计算可以以差异化的私有方式执行，需要该领域的专家进行大量的手动工作，这阻碍了它在实践中的扩展。 该项目旨在将差异隐私付诸实践-构建一个支持差异隐私数据分析的系统，可供普通程序员使用，并且足够通用，可用于各种应用程序。这样的系统可以广泛使用，并使强大的隐私保证成为任何敏感数据被发布或分析的标准功能。具体的贡献将包括丰富差分隐私的基本模型，以解决实际问题，如数据与固有的相关性，增加的准确性，功能的隐私，或流数据的隐私;编译一个差分隐私编程语言，沿着一个编译器，可以自动证明在这种语言中的程序是差分隐私，和一个运行时系统，是针对侧信道攻击硬化;并展示了如何在一个特定的环境中应用差异隐私，其中私人数据分布在不同管理域的许多数据库中，可能存在重叠，异构模式和不同的隐私期望。 长期目标是将来自差分隐私、编程语言和分布式系统的思想联合收割机，使具有强大的、可证明的隐私保证的数据分析技术实用于一般用途。差异隐私的主题也被整合到宾夕法尼亚大学的市场和社会系统工程的新本科课程。