Revealing the True Cost of Locally Differentially Private Protocols: An Auditing Perspective - Inria - Institut national de recherche en sciences et technologies du numérique
Article Dans Une Revue Proceedings on Privacy Enhancing Technologies Année : 2024

Revealing the True Cost of Locally Differentially Private Protocols: An Auditing Perspective

Résumé

While the existing literature on Differential Privacy (DP) auditing predominantly focuses on the centralized model (e.g., in auditing the DP-SGD algorithm), we advocate for extending this approach to audit Local DP (LDP). To achieve this, we introduce the LDP-Auditor framework for empirically estimating the privacy loss of locally differentially private mechanisms. This approach leverages recent advances in designing privacy attacks against LDP frequency estimation protocols. More precisely, through the analysis of numerous state-of-the-art LDP protocols, we extensively explore the factors influencing the privacy audit, such as the impact of different encoding and perturbation functions. Additionally, we investigate the influence of the domain size and the theoretical privacy loss parameters ϵ and δ on local privacy estimation. In-depth case studies are also conducted to explore specific aspects of LDP auditing, including distinguishability attacks on LDP protocols for longitudinal studies and multidimensional data. Finally, we present a notable achievement of our LDP-Auditor framework, which is the discovery of a bug in a state-of-the-art LDP Python package. Overall, our LDP-Auditor framework as well as our study offer valuable insights into the sources of randomness and information loss in LDP protocols. These contributions collectively provide a realistic understanding of the local privacy loss, which can help practitioners in selecting the LDP mechanism and privacy parameters that best align with their specific requirements. We open-sourced LDP-Auditor in https://github.com/hharcolezi/ldp-audit.
Fichier principal
Vignette du fichier
paper120_2024_4_source.pdf (1.33 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04644975 , version 1 (11-07-2024)

Licence

Identifiants

Citer

Héber H. Arcolezi, Sébastien Gambs. Revealing the True Cost of Locally Differentially Private Protocols: An Auditing Perspective. Proceedings on Privacy Enhancing Technologies, 2024, 2024 (4), pp.123 - 141. ⟨10.56553/popets-2024-0110⟩. ⟨hal-04644975⟩
205 Consultations
78 Téléchargements

Altmetric

Partager

More