Preventing Manipulation Attack in Local Differential Privacy Using Verifiable Randomization Mechanism - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2021

Preventing Manipulation Attack in Local Differential Privacy Using Verifiable Randomization Mechanism

Fumiyuki Kato
  • Fonction : Auteur
  • PersonId : 1135156
Yang Cao
  • Fonction : Auteur
  • PersonId : 1059343
Masatoshi Yoshikawa
  • Fonction : Auteur
  • PersonId : 1135157

Résumé

Local differential privacy (LDP) has been received increasing attention as a formal privacy definition without a trusted server. In a typical LDP protocol, the clients perturb their data locally with a randomized mechanism before sending it to the server for analysis. Many studies in the literature of LDP implicitly assume that the clients honestly follow the protocol; however, two recent studies show that LDP is generally vulnerable under malicious clients. Cao et al. (USENIX Security ’21) and Cheu et al. (IEEE S&P ’21) demonstrated that the malicious clients could effectively skew the analysis (such as frequency estimation) by sending fake data to the server, which is called data poisoning attack or manipulation attack against LDP. In this paper, we propose secure and efficient verifiable LDP protocols to prevent manipulation attacks. Specifically, we leverage Cryptographic Randomized Response Technique (CRRT) as a building block to convert existing LDP mechanisms into a verifiable version. In this way, the server can verify the completeness of executing an agreed randomization mechanism on the client side without sacrificing local privacy. Our proposed method can completely protect the LDP protocol from output manipulation attacks, and significantly mitigates unexpected damage from malicious clients with acceptable computational overhead.
Fichier principal
Vignette du fichier
513274_1_En_3_Chapter.pdf (1.27 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03677038 , version 1 (24-05-2022)

Licence

Identifiants

Citer

Fumiyuki Kato, Yang Cao, Masatoshi Yoshikawa. Preventing Manipulation Attack in Local Differential Privacy Using Verifiable Randomization Mechanism. 35th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2021, Calgary, AB, Canada. pp.43-60, ⟨10.1007/978-3-030-81242-3_3⟩. ⟨hal-03677038⟩
42 Consultations
26 Téléchargements

Altmetric

Partager

More