CIF: Small: Collaborative Research: Generative Adversarial Privacy: A Data-driven Approach to Guaranteeing Privacy and Utility

CIF：小型：协作研究：生成对抗性隐私：保证隐私和实用性的数据驱动方法

• 批准号: 1814880
• 负责人: Ram Rajagopal
• 金额: $ 20万
• 依托单位: Stanford University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-10-01 至 2021-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1814880&HistoricalAwards=false
• 关键词: CIF; Small; Collaborative; Research; Generative

There is a growing need to publish datasets for both public benefit (via data-driven research) and private gains (enterprise data sharing). However, consumer privacy concerns have largely stymied such efforts since large datasets also contain confidential information about participating individuals. This project leverages recent advancements in learning generative models directly from the datasets to introduce a novel framework called generative adversarial privacy (GAP). GAP formalizes adversarial learning as a game between a privatizer that wishes to learn the optimal privacy mechanism and any statistical adversary intent on learning the confidential features. This formalization is crucial to evaluate data-driven approaches against adversaries with strong inferential capabilities. This project will include interactions with Honeywell Labs as well as outreach and dissemination with Stanford industry partners in the electricity and smart cities sector. Outreach programs include exposing middle- and high-school girls to social network privacy challenges at ASU and K-12 teacher training on data science through the Stanford Office of Science Outreach Program.The project will focus on three foundational problems. The first two ensure privacy of confidential features in the published data and involve developing: (i) theoretical limits of the GAP formulation for a large class of loss functions that capture a range of adversarial capabilities; and (ii) convergence guarantees of the proposed GAP model. The third problem focuses on guaranteeing identity privacy via synthetic datasets using a combination of generative models (to generate synthetic data from training data) and classes of statistical adversaries to understand the efficacy of generating synthetic datasets with both utility and privacy guarantees. A key element of this project involves testing on both publicly available datasets as well as proprietary data.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

为了公共利益（通过数据驱动的研究）和私人收益（企业数据共享），越来越需要发布数据集。然而，消费者隐私问题在很大程度上阻碍了这种努力，因为大型数据集也包含有关参与个人的机密信息。该项目利用了直接从数据集学习生成模型的最新进展，引入了一个名为生成对抗隐私（GAP）的新框架。GAP将对抗性学习形式化为希望学习最佳隐私机制的私有化者与任何意图学习机密特征的统计对手之间的博弈。这种形式化对于评估数据驱动方法对抗具有强大推理能力的对手至关重要。该项目将包括与霍尼韦尔实验室的互动，以及与斯坦福大学在电力和智慧城市领域的行业合作伙伴的推广和传播。推广项目包括通过斯坦福大学科学推广项目办公室在亚利桑那州立大学和K-12教师培训中让初中和高中女生接触社交网络隐私挑战。该项目将重点关注三个基本问题。前两个确保了已发布数据中机密特征的隐私性，并涉及开发：（i）差距公式的理论极限，用于捕获一系列对抗能力的一大类损失函数;以及（ii）所提出的GAP模型的收敛保证。第三个问题的重点是通过合成数据集使用生成模型（从训练数据生成合成数据）和统计对手类别的组合来保证身份隐私，以了解生成具有实用性和隐私保证的合成数据集的有效性。该项目的一个关键要素是对公开数据集和专有数据进行测试。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Understanding Compressive Adversarial Privacy

• DOI: 10.1109/cdc.2018.8619455
• 发表时间: 2018-09
• 期刊: 2018 IEEE Conference on Decision and Control (CDC)
• 作者: Xiao Chen;P. Kairouz;R. Rajagopal

Distributed generation of privacy preserving data with user customization

• 发表时间: 2019-04
• 期刊: ArXiv
• 作者: Xiao Chen;Thomas Navidi;Stefano Ermon;R. Rajagopal

Energy resource control via privacy preserving data

通过隐私保护数据控制能源资源

• DOI: 10.1016/j.epsr.2020.106719
• 发表时间: 2020
• 期刊: Electric Power Systems Research
• 影响因子: 3.9
• 作者: Chen, Xiao;Navidi, Thomas;Rajagopal, Ram
• 通讯作者: Rajagopal, Ram