The Promise of Differentially Private Social Network Analysis · Picture from Andreas...
Transcript of The Promise of Differentially Private Social Network Analysis · Picture from Andreas...
![Page 1: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/1.jpg)
The Promise of Differentially PrivateSocial Network Analysis
Vishesh Karwa
Carnegie Mellon University
LARC – March 27th 2015
![Page 2: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/2.jpg)
What is Statistical Privacy?
![Page 3: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/3.jpg)
Overview of Privacy Research
![Page 4: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/4.jpg)
Sharing Networks data privately
![Page 5: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/5.jpg)
In This Talk
![Page 6: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/6.jpg)
Why is Privacy Important?
![Page 7: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/7.jpg)
7
Three methods for sharing data
www.sangrea.net
![Page 8: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/8.jpg)
MechanismDatabase of
People/RelationsUsers
f(G)
queries
answers
Government,researchers,businesses
(or) Maliciousadversary
Privacy in Statistical Databases
8
![Page 9: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/9.jpg)
Why is Privacy Hard?
![Page 10: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/10.jpg)
Why is Network Privacy Hard?
![Page 11: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/11.jpg)
Attacks on Past Techniques
Picture from Andreas Haeberlen’s slides
![Page 12: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/12.jpg)
Netflix attack [Narayanan, Shmatikov 2008]
Picture Courtesy – Adam Smith and Arvind Narayanan
![Page 13: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/13.jpg)
Lessons Learned
![Page 14: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/14.jpg)
In This Talk
![Page 15: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/15.jpg)
The Cryptographic Solution to Privacy
P(Z|X) P(Z|X’)
x x’
![Page 16: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/16.jpg)
Edge Differential Privacy*
x
x’
P(.|x) P(.|x’)
![Page 17: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/17.jpg)
Differential Privacy - Properties
I am okay with giving my data for the study, but I need to protect
my privacy.
Don’t worry, no one will learn anything more about you than what they already know.
![Page 18: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/18.jpg)
The Differential Privacy Guarantee
![Page 19: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/19.jpg)
How to achieve Differential Privacy?
Global Sensitivity:
![Page 20: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/20.jpg)
Example - Laplace Mechanism
20
Laplace Mechanism:
f(G) f(G’)
![Page 21: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/21.jpg)
In This Talk
![Page 22: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/22.jpg)
Key issues with Differential privacy*
G
G
![Page 23: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/23.jpg)
An ERGM framework for networks
![Page 24: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/24.jpg)
The Beta model
1
2
5
3
4
![Page 25: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/25.jpg)
Private estimator of beta model
![Page 26: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/26.jpg)
Step 1 - Release degree sequence
![Page 27: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/27.jpg)
Step 2 - Re-estimate Degree Sequence
![Page 28: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/28.jpg)
Step 3 - Estimate parameters
![Page 29: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/29.jpg)
Karate Data Set
Likoma n=250, m = 248 Degree sequence of people on Likoma Island
Karate n = 34, m = 78 Network of Members of Karate club
![Page 30: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/30.jpg)
Likoma Island
Likoma n=250, m = 248 Degree sequence of people on Likoma Island
Karate n = 34, m = 78 Network of Members of Karate club
![Page 31: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/31.jpg)
More general ERGMs…
![Page 32: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/32.jpg)
Randomized ResponseOld Wine in new Bottle
![Page 33: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/33.jpg)
Inference with Randomized data
![Page 34: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/34.jpg)
Approximate Likelihood Inference
![Page 35: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/35.jpg)
Faux Mesa High
![Page 36: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/36.jpg)
Teenage friendship study
![Page 37: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/37.jpg)
KL divergence
![Page 38: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/38.jpg)
Faux Mesa High
![Page 39: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/39.jpg)
Teenage Friendship Data
![Page 40: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/40.jpg)
Summary
![Page 41: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/41.jpg)
Thanks!
Questions?
![Page 42: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/42.jpg)
![Page 43: The Promise of Differentially Private Social Network Analysis · Picture from Andreas Haeberlen’sslides. Netflix attack [Narayanan, Shmatikov 2008] ... Step 1 - Release degree sequence.](https://reader033.fdocuments.in/reader033/viewer/2022050203/5f5672118d67a66a311951e6/html5/thumbnails/43.jpg)