通过输入扰动实现最小生成树的最优隐私保护,兼顾效率与精度。
Optimal Bounds for Private Minimum Spanning Trees via Input Perturbation
- 对边权加随机扰动,再用普通算法求解,即可满足隐私要求。
- 误差达到最优量级,为 $\tilde{O}(n^{3/2})$,且时间复杂度与非私有算法一致。
- 首次给出私有最小生成树的隐私-效用下界,适合隐私计算研究者。
我们研究在边权差分隐私下发布近似最小生成树(MST)的问题。给定图 $G = (V, E, ar{W})$,其中 $V$ 包含 $n$ 个顶点,$E$ 包含 $m$ 条无向边,$ar{W} \in \mathbb{R}^{|E|}$ 为边权向量,目标是在边权差分隐私(由 Sealfon 2016 提出)下发布近似 MST,其中 $V$ 与 $E$ 公开,权重向量私有。相邻图定义为边权 $\ orm{\bar{W}-\bar{W}'}}_\infty \leq \Delta_\infty$。现有方法在计算效率与准确率间存在权衡。本文提出一种输入扰动策略:仅添加不足够使权重私有的随机噪声,即可保证任何非私有 MST 算法输出的隐私性,并达到当前最优误差。通过连接到私有 Top-k 选择问题,我们首次建立了近似差分隐私下 MST 的隐私-效用下界,证明误差量级 $\tilde{O}(n^{3/2})$ 在对数因子内最优。方法在时间复杂度上匹配非私有算法,同时实现最优误差。实验验证了其实际可行性。
原文摘要 · Abstract (English)
We study the problem of privately releasing an approximate minimum spanning tree (MST). Given a graph $G = (V, E, \vec{W})$ where $V$ is a set of $n$ vertices, $E$ is a set of $m$ undirected edges, and $ \vec{W} \in \mathbb{R}^{|E|} $ is an edge-weight vector, our goal is to publish an approximate MST under edge-weight differential privacy, as introduced by Sealfon in PODS 2016, where $V$ and $E$ are considered public and the weight vector is private. Our neighboring relation is $\ell_\infty$-distance on weights: for a sensitivity parameter $Δ_\infty$, graphs $ G = (V, E, \vec{W}) $ and $ G' = (V, E, \vec{W}') $ are neighboring if $\|\vec{W}-\vec{W}'\|_\infty \leq Δ_\infty$. Existing private MST algorithms face a trade-off, sacrificing either computational efficiency or accuracy. We show that it is possible to get the best of both worlds: With a suitable random perturbation of the input that does not suffice to make the weight vector private, the result of any non-private MST algorithm will be private and achieves a state-of-the-art error guarantee. Furthermore, by establishing a connection to Private Top-k Selection [Steinke and Ullman, FOCS '17], we give the first privacy-utility trade-off lower bound for MST under approximate differential privacy, demonstrating that the error magnitude, $\tilde{O}(n^{3/2})$, is optimal up to logarithmic factors. That is, our approach matches the time complexity of any non-private MST algorithm and at the same time achieves optimal error. We complement our theoretical treatment with experiments that confirm the practicality of our approach.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。