CIF: Small: Collaborative Research: Generative Adversarial Privacy: A Data-driven Approach to Guaranteeing Privacy and Utility

CIF：小型：协作研究：生成对抗性隐私：保证隐私和实用性的数据驱动方法

• 批准号: 1814880
• 负责人: Ram Rajagopal
• 金额: $ 20万
• 依托单位: Stanford University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-10-01 至 2021-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1814880&HistoricalAwards=false
• 关键词: CIF; Small; Collaborative; Research; Generative

There is a growing need to publish datasets for both public benefit (via data-driven research) and private gains (enterprise data sharing). However, consumer privacy concerns have largely stymied such efforts since large datasets also contain confidential information about participating individuals. This project leverages recent advancements in learning generative models directly from the datasets to introduce a novel framework called generative adversarial privacy (GAP). GAP formalizes adversarial learning as a game between a privatizer that wishes to learn the optimal privacy mechanism and any statistical adversary intent on learning the confidential features. This formalization is crucial to evaluate data-driven approaches against adversaries with strong inferential capabilities. This project will include interactions with Honeywell Labs as well as outreach and dissemination with Stanford industry partners in the electricity and smart cities sector. Outreach programs include exposing middle- and high-school girls to social network privacy challenges at ASU and K-12 teacher training on data science through the Stanford Office of Science Outreach Program.The project will focus on three foundational problems. The first two ensure privacy of confidential features in the published data and involve developing: (i) theoretical limits of the GAP formulation for a large class of loss functions that capture a range of adversarial capabilities; and (ii) convergence guarantees of the proposed GAP model. The third problem focuses on guaranteeing identity privacy via synthetic datasets using a combination of generative models (to generate synthetic data from training data) and classes of statistical adversaries to understand the efficacy of generating synthetic datasets with both utility and privacy guarantees. A key element of this project involves testing on both publicly available datasets as well as proprietary data.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

为了公共利益（通过数据驱动研究）和私人收益（企业数据共享），越来越需要发布数据集。但是，消费者隐私问题在很大程度上阻碍了此类努力，因为大型数据集还包含有关参与个人的机密信息。该项目直接从数据集中利用了学习生成模型的最新进展，以引入一个名为“生成对抗隐私（GAP）”的新颖框架。差距正式将对抗性学习正式为私有化者之间的游戏，该游戏希望学习最佳的隐私机制和任何意图学习机密特征的统计对手。这种形式化对于评估针对具有强大推论能力的对手的数据驱动方法至关重要。该项目将包括与霍尼韦尔实验室的互动，以及与斯坦福大学电力和智能城市领域的斯坦福工业合作伙伴的传播和传播。外展计划包括通过斯坦福大学科学外展计划将中学和高中女孩暴露于ASU和K-12数据科学培训的社交网络隐私挑战。该项目将重点介绍三个基本问题。前两个确保了已发布数据中机密特征的隐私性，并涉及开发：（i）大量损失函数的差距公式的理论限制，这些损失功能捕获了一系列对抗性功能； （ii）提出的间隙模型的收敛保证。第三个问题的重点是使用生成模型的组合（从培训数据中生成合成数据）和统计对手类别来确保通过合成数据集确保身份隐私，以了解具有效用和隐私保证的合成数据集的功效。该项目的一个关键要素涉及对公开可用数据集进行测试以及专有数据。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛影响的评估评估标准通过评估来支持的。

项目成果

Understanding Compressive Adversarial Privacy

• DOI: 10.1109/cdc.2018.8619455
• 发表时间: 2018-09
• 期刊: 2018 IEEE Conference on Decision and Control (CDC)
• 作者: Xiao Chen;P. Kairouz;R. Rajagopal

Energy resource control via privacy preserving data

通过隐私保护数据控制能源资源

• DOI: 10.1016/j.epsr.2020.106719
• 发表时间: 2020
• 期刊: Electric Power Systems Research
• 影响因子: 3.9
• 作者: Chen, Xiao;Navidi, Thomas;Rajagopal, Ram
• 通讯作者: Rajagopal, Ram

Distributed generation of privacy preserving data with user customization

• 发表时间: 2019-04
• 期刊: ArXiv
• 作者: Xiao Chen;Thomas Navidi;Stefano Ermon;R. Rajagopal