论文标题
众包信号图中的隐私 - 止值交易混淆
Privacy-Utility Trades in Crowdsourced Signal Map Obfuscation
论文作者
论文摘要
蜂窝提供者和数据汇总公司众群体信号强度测量从用户设备生成信号图,可用于改善网络性能。认识到此数据收集可能与对隐私问题的认识的越来越多,我们考虑在数据离开移动设备之前混淆此类数据。目的是增加隐私,因此很难从混淆的数据(例如用户ID和用户下落)中恢复敏感功能,同时仍允许网络提供商使用数据来改善网络服务(即创建准确的信号映射)。为了检查这种隐私 - 实用性的权衡,我们确定了隐私和效用指标以及适合表示强度测量的威胁模型。然后,我们使用多种杰出的技术来混淆测量,涵盖差异隐私,生成的对抗性隐私和信息理论隐私技术,以便基准测试各种有前途的混淆方法,并为在不限制无害私有itical无害的无害隐私而构建信号的现实世界中的现实世界工程师提供指导。我们的评估结果基于多个,多样化的现实信号图数据集,证明了同时实现足够的隐私和效用的可行性,以及使用该数据集中使用数据集的结构和预期使用的策略,而不是目标平均案例,而不是最糟糕的案例。
Cellular providers and data aggregating companies crowdsource celluar signal strength measurements from user devices to generate signal maps, which can be used to improve network performance. Recognizing that this data collection may be at odds with growing awareness of privacy concerns, we consider obfuscating such data before the data leaves the mobile device. The goal is to increase privacy such that it is difficult to recover sensitive features from the obfuscated data (e.g. user ids and user whereabouts), while still allowing network providers to use the data for improving network services (i.e. create accurate signal maps). To examine this privacy-utility tradeoff, we identify privacy and utility metrics and threat models suited to signal strength measurements. We then obfuscate the measurements using several preeminent techniques, spanning differential privacy, generative adversarial privacy, and information-theoretic privacy techniques, in order to benchmark a variety of promising obfuscation approaches and provide guidance to real-world engineers who are tasked to build signal maps that protect privacy without hurting utility. Our evaluation results, based on multiple, diverse, real-world signal map datasets, demonstrate the feasibility of concurrently achieving adequate privacy and utility, with obfuscation strategies which use the structure and intended use of datasets in their design, and target average-case, rather than worst-case, guarantees.