论文标题
重建私人轨迹保护机制的重建攻击
Reconstruction Attack on Differential Private Trajectory Protection Mechanisms
论文作者
论文摘要
智能手机和其他设备收集的位置轨迹代表了基于位置服务等应用程序的宝贵数据源。同样,轨迹有可能揭示有关个人的敏感信息,例如宗教信仰或性取向。因此,轨迹数据集需要适当的消毒。由于其强大的理论隐私保证,差异私人出版机制受到了很多关注。但是,实现差异隐私所需的大量噪声会产生结构性差异,例如,船舶轨迹经过土地。我们提出了对受保护轨迹(RAOPT)的基于深度学习的重建攻击,该攻击利用上述差异从差异私有释放中部分重建原始轨迹。评估表明,我们的RAOPT模型可以用$ \ varepsilon \ leq 1 $在两个现实世界数据集中释放和原始轨迹之间的欧几里得和豪斯多夫距离降低68%以上。在这种情况下,攻击将轨迹凸面的平均jaccard指数(代表用户的活动空间)增加了180%以上。该模型在Geolife数据集中受过培训,仍然将欧几里得和Hausdorff距离降低了60%以上,该轨迹受到最先进的机制保护($ \ varepsilon = 0.1 $)。这项工作强调了当前的轨迹出版机制的缺点,因此激发了对隐私发布计划的进一步研究。
Location trajectories collected by smartphones and other devices represent a valuable data source for applications such as location-based services. Likewise, trajectories have the potential to reveal sensitive information about individuals, e.g., religious beliefs or sexual orientations. Accordingly, trajectory datasets require appropriate sanitization. Due to their strong theoretical privacy guarantees, differential private publication mechanisms receive much attention. However, the large amount of noise required to achieve differential privacy yields structural differences, e.g., ship trajectories passing over land. We propose a deep learning-based Reconstruction Attack on Protected Trajectories (RAoPT), that leverages the mentioned differences to partly reconstruct the original trajectory from a differential private release. The evaluation shows that our RAoPT model can reduce the Euclidean and Hausdorff distances between the released and original trajectories by over 68% on two real-world datasets under protection with $\varepsilon \leq 1$. In this setting, the attack increases the average Jaccard index of the trajectories' convex hulls, representing a user's activity space, by over 180%. Trained on the GeoLife dataset, the model still reduces the Euclidean and Hausdorff distances by over 60% for T-Drive trajectories protected with a state-of-the-art mechanism ($\varepsilon = 0.1$). This work highlights shortcomings of current trajectory publication mechanisms, and thus motivates further research on privacy-preserving publication schemes.