L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on...
Transcript of L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on...
![Page 1: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/1.jpg)
L21: Privacy
Je↵ M. Phillips
April 6, 2020
![Page 2: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/2.jpg)
Ethics = Empathy
what if you were the date point ?
*¥÷÷ ..
![Page 3: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/3.jpg)
In early 20005,
- I of new tach companies
- eagerness ,interact scientists
Place data set online,
-anongmi?
- state goal- have competition to solve
↳ model, predictions .
![Page 4: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/4.jpg)
Example: Heath Records
Story Time:
I In 2000, Massachusetts released all State employee’s medical
records in an e↵ort for researchers to be able to study them.
I They wiped all ids, but kept zip codes, birthday, gender. Was
declared anonymized by the government.
I In Massachusetts, it was possible to buy voter data for $20. It
has names, zip codes, and gender of all voters.
I A grad student, Latanya Sweeney combined the two to
identify the governor of Massachusetts. Story is, she mailed
him his own health records!
I Dr. Sweeney now teaches at Harvard.
![Page 5: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/5.jpg)
Example: Heath Records
Story Time:
I In 2000, Massachusetts released all State employee’s medical
records in an e↵ort for researchers to be able to study them.
I They wiped all ids, but kept zip codes, birthday, gender. Was
declared anonymized by the government.
I In Massachusetts, it was possible to buy voter data for $20. It
has names, zip codes, and gender of all voters.
I A grad student, Latanya Sweeney combined the two to
identify the governor of Massachusetts. Story is, she mailed
him his own health records!
I Dr. Sweeney now teaches at Harvard.
![Page 6: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/6.jpg)
Example: Heath Records
Story Time:
I In 2000, Massachusetts released all State employee’s medical
records in an e↵ort for researchers to be able to study them.
I They wiped all ids, but kept zip codes, birthday, gender. Was
declared anonymized by the government.
I In Massachusetts, it was possible to buy voter data for $20. It
has names, zip codes, and gender of all voters.
I A grad student, Latanya Sweeney combined the two to
identify the governor of Massachusetts. Story is, she mailed
him his own health records!
I Dr. Sweeney now teaches at Harvard.
-
![Page 7: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/7.jpg)
Example: Heath Records
Story Time:
I In 2000, Massachusetts released all State employee’s medical
records in an e↵ort for researchers to be able to study them.
I They wiped all ids, but kept zip codes, birthday, gender. Was
declared anonymized by the government.
I In Massachusetts, it was possible to buy voter data for $20. It
has names, zip codes, and gender of all voters.
I A grad student, Latanya Sweeney combined the two to
identify the governor of Massachusetts. Story is, she mailed
him his own health records!
I Dr. Sweeney now teaches at Harvard.
-
![Page 8: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/8.jpg)
Example: Heath Records
Story Time:
I In 2000, Massachusetts released all State employee’s medical
records in an e↵ort for researchers to be able to study them.
I They wiped all ids, but kept zip codes, birthday, gender. Was
declared anonymized by the government.
I In Massachusetts, it was possible to buy voter data for $20. It
has names, zip codes, and gender of all voters.
I A grad student, Latanya Sweeney combined the two to
identify the governor of Massachusetts. Story is, she mailed
him his own health records!
I Dr. Sweeney now teaches at Harvard.
![Page 9: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/9.jpg)
Example: Heath Records
Story Time:
I In 2000, Massachusetts released all State employee’s medical
records in an e↵ort for researchers to be able to study them.
I They wiped all ids, but kept zip codes, birthday, gender. Was
declared anonymized by the government.
I In Massachusetts, it was possible to buy voter data for $20. It
has names, zip codes, and gender of all voters.
I A grad student, Latanya Sweeney combined the two to
identify the governor of Massachusetts. Story is, she mailed
him his own health records!
I Dr. Sweeney now teaches at Harvard.
![Page 10: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/10.jpg)
How to release data anonymouslywhile preserving individual
int
k - anonymity : Hate sat has public traits- -
{ age , Zip code, gender)categorical
private traits : has cancer,
has Covin - is
enforce atleast each person
has at least k - I other people✓ ( same publicity released
traits.
![Page 11: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/11.jpg)
l - diversity i k - anonymity- -
i and each
grouphad l - diverse traits
.
e.g .Some have cancer
some don't-
issue either have cancer
ur have diabetes-
t.cl#ssil-dier-sib and the distribute.
of traits is t - close to
distribution of all people in
data .
![Page 12: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/12.jpg)
Height of Sylvester Stallone-
. Information i Slg Stallone is height oof
the avenge TVJ man .
• Independent survey : Average height b men
-
in NJ s'
8"
![Page 13: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/13.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 14: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/14.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
-
# no grade
![Page 15: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/15.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 16: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/16.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 17: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/17.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 18: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/18.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 19: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/19.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 20: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/20.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 21: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/21.jpg)
Example: Netflix Prize
Story Time:
I In 2006, Netflix (e.g., DVDs) released awesome data sets
D1 = {huser-id, movie, date of grade, gradei}.And another set D2 = {huser-id, movie, date of gradei}.Wants researchers to predict grade on D2.
(Had another similar private data D3 to evaluate grades :
cross validation.)
I If certain improvement over Netflix’s algorithm, get $1 million!
I Led to lots of cool research!
I Raters of movies also rated on IMDB (w/ user id, time stamp)
I Researchers showed that by linking who rated similar sets of
movies, with similar scores and times, they could identify
many people.
I (maybe watched embarrassing films on Netflix, not listed on
IMDB)
I Class action lawsuit filed (lated dropped) against Netflix.
I Netflix Prize had proposed sequel, dropped in 2010 for more
privacy concerns.
![Page 22: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/22.jpg)
Differential Privacy
#true
¢released
• Two similar data sets D,
& Da
↳ global analysis on D. similar to De
↳ for no.
pastneular data point in
D, can
I know its value,
globo.la#si3 Databases
movie ;
-TYfo①ooi0①pD;Was q 34 WE
tf:& Prcgco , er ]I 'T ?.ge?YEaiohs3pEzezyEexpCe)ay*e
![Page 23: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/23.jpg)
Tuo-Uersio#
• Interactive Version-
Icontrol D.,
D,
I limit queries
↳ I return answer w/ noise
-F.7¥
Range Du as Igo .
• Non - Iterative
Tpersurb D, →
D .
I release p, .
' (b 'd:3: "
Dz -- Dit Lap.
Noise.
![Page 24: L21: Privacyjeffp/teaching/cs5140/L21-notes.pdf · 2020. 4. 6. · I Raters of movies also rated on IMDB (w/ user id, time stamp) I Researchers showed that by linking who rated similar](https://reader036.fdocuments.in/reader036/viewer/2022062508/602c5d4bf1f1df677f36c896/html5/thumbnails/24.jpg)
Height of Sly Stallone
Dz → s'
,9
"= 69
"
=D, t Lap ( a )
" or '?44example D
,= 68
"
e
Do [ D.
270 ) = e-
K
- - = e
- "
ve
-
= e
- " "
Dr CD,
270 ] =e
- &
= e
- a
Pr CD,
270 ]- = e
"= Ita
Pr. 270 ]