arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2104.07938cs.LGcs.CRstat.AP
收藏

通过数据划分实现$k$-最近邻离群点检测的差分隐私

Achieving differential privacy for $k$-nearest neighbors based outlier detection by data partitioning

University of Applied Sciences Osnabrück(奥斯纳布吕克应用科学大学);Leibniz University Hannover(莱布尼茨汉诺威大学)

Jens Rauch, Iyiola E. Olatunji, Megha Khosla

摘要:

当在数据敏感的环境中应用离群值检测时,需要保证底层数据隐私的机制。$k$-最近邻($k$-NN)算法是一种简单有效的离群点检测方法。到目前为止,还没有尝试开发用于基于$k$-NN的离群值检测的差分私有($ε$-DP)方法。现有的方法通常放宽$ε$-DP的概念,并采用除$k$-NN之外的其他方法。我们提出了一种基于$k$-NN的离群点检测方法,该方法通过将该过程分离为对参考内点数据的拟合步骤,然后将离群点分类器应用于新数据。我们实现了$ε$-DP的拟合算法和离群值分类器相对于参考数据的数据集划分成一个统一的网格,这产生低的全局灵敏度。我们的方法在不同维度的真实数据上产生了接近最佳的性能,与非私有版本的$k$-NN相比。

英文摘要:

When applying outlier detection in settings where data is sensitive, mechanisms which guarantee the privacy of the underlying data are needed. The $k$-nearest neighbors ($k$-NN) algorithm is a simple and one of the most effective methods for outlier detection. So far, there have been no attempts made to develop a differentially private ($ε$-DP) approach for $k$-NN based outlier detection. Existing approaches often relax the notion of $ε$-DP and employ other methods than $k$-NN. We propose a method for $k$-NN based outlier detection by separating the procedure into a fitting step on reference inlier data and then apply the outlier classifier to new data. We achieve $ε$-DP for both the fitting algorithm and the outlier classifier with respect to the reference data by partitioning the dataset into a uniform grid, which yields low global sensitivity. Our approach yields nearly optimal performance on real-world data with varying dimensions when compared to the non-private versions of $k$-NN.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑