We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:


Current browse context:


Change to browse by:


References & Citations

DBLP - CS Bibliography


(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo ScienceWISE logo

Computer Science > Cryptography and Security

Title: Fine-grained Poisoning Attack to Local Differential Privacy Protocols for Mean and Variance Estimation

Abstract: Although local differential privacy (LDP) protects individual users' data from inference by an untrusted data curator, recent studies show that an attacker can launch a data poisoning attack from the user side to inject carefully-crafted bogus data into the LDP protocols in order to maximally skew the final estimate by the data curator.
In this work, we further advance this knowledge by proposing a new fine-grained attack, which allows the attacker to fine-tune and simultaneously manipulate mean and variance estimations that are popular analytical tasks for many real-world applications. To accomplish this goal, the attack leverages the characteristics of LDP to inject fake data into the output domain of the local LDP instance. We call our attack the output poisoning attack (OPA). We observe a security-privacy consistency where a small privacy loss enhances the security of LDP, which contradicts the known security-privacy trade-off from prior work. We further study the consistency and reveal a more holistic view of the threat landscape of data poisoning attacks on LDP. We comprehensively evaluate our attack against a baseline attack that intuitively provides false input to LDP. The experimental results show that OPA outperforms the baseline on three real-world datasets. We also propose a novel defense method that can recover the result accuracy from polluted data collection and offer insight into the secure LDP design.
Subjects: Cryptography and Security (cs.CR)
Cite as: arXiv:2205.11782 [cs.CR]
  (or arXiv:2205.11782v4 [cs.CR] for this version)

Submission history

From: Xiaoguang Li [view email]
[v1] Tue, 24 May 2022 04:43:43 GMT (403kb,D)
[v2] Wed, 12 Oct 2022 11:20:15 GMT (322kb,D)
[v3] Sun, 26 Feb 2023 16:19:30 GMT (2106kb,D)
[v4] Fri, 10 Mar 2023 14:37:29 GMT (2107kb,D)

Link back to: arXiv, form interface, contact.