Collaborative Research: IMR: MM-1B: Foundations for Differentially Private Internet Measurement

互联网测量研究为指导互联网基础设施的设计提供了重要的见解和证据支持。然而，如何在尊重用户隐私的同时共享和使用互联网测量数据仍然具有挑战性。为了保护隐私，大多数作品选择匿名敏感字段或只发布汇总的统计数据，但这种方法容易受到隐私攻击。差分隐私为数据发布提供有保证的隐私保护，已获得公司和政府机构的显著关注，是共享互联网测量数据的自然选择。然而，一个关键的差距仍然是确定如何差异隐私可以应用于网络问题。该项目旨在了解隐私问题，然后为在互联网测量数据的处理管道中部署差异隐私奠定基础。该项目更广泛的意义和重要性包括将技术转让给工业界，让代表性不足的群体成员参与进来，并通过K-12外联和社区服务传播成果。Thrust 1对现有收集和共享互联网测量数据的做法中的隐私问题进行了全面研究，并开发了一个推理攻击基准，以评估不同保护机制的隐私风险和益处。推力2研究如何差分隐私可以调整和集成到互联网测量数据的处理管道，通过开发新的可配置和宽松的差分隐私的概念。Thrust 3开发了在满足差异隐私的同时发布合成互联网测量数据的方法。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估而被认为值得支持。

Internet measurement research has been providing critical insights and evidence support in guiding the design of Internet infrastructures. However, how to share and use Internet measurement data while respecting users' privacy is still challenging. To protect privacy, most works choose to anonymize sensitive fields or only publish the aggregated statistics, but such methods are vulnerable to privacy attacks. Differential privacy, which provides guaranteed privacy protection for data release, has gained prominent traction from companies and government agencies, and is a natural choice for sharing Internet measurement data. However, a critical gap remains to identify how differential privacy can be applied to networking problems. This project aims to understand privacy issues and then lay the foundations for deploying differential privacy in the processing pipeline of Internet measurement data. The project's broader significance and importance include transferring the technologies to industry, involving members from under-represented groups, and disseminating outcomes through K-12 outreach and community services.The project is structured around three main aims. Thrust 1 conducts a comprehensive study of the privacy issues in the existing practices in collecting and sharing Internet measurement data, and develops an inference attack benchmark to assess the privacy risks and the benefits of different protection mechanisms. Thrust 2 investigates how differential privacy can be adjusted and integrated into the processing pipeline of Internet measurement data, by developing new configurable and relaxed differential privacy notions. Thrust 3 develops methods to publish synthetic Internet measurement data while satisfying differential privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.