arXiv:2508.01479cs.CRcs.AI2025-08

从信任得分还原设备嵌入,揭示隐私泄露风险

Reconstructing Trust Embeddings from Siamese Trust Scores: A Direct-Sum Approach with Fixed-Point Semantics

  • 用配对得分序列与四阶矩特征构造直接求和估计器
  • 在高斯噪声下仍能保持设备间几何结构,误差随序列长度降低
  • 适用于关注分布式系统隐私安全的研究者

我们研究从分布式安全框架中暴露的一维西米斯信任得分,逆向重构高维信任嵌入的难题。基于两个独立代理对同一组设备发布的时间戳相似性得分,形式化了估计任务,推导出一种显式的直接求和估计器,该估计器将配对得分序列与四阶矩特征拼接,并证明在巴拿赫理论支撑的压缩论证下,重构映射具有唯一不动点。一系列合成基准测试(20个设备 × 10个时间步)表明,即使存在高斯噪声,恢复的嵌入仍能保持设备间欧氏与余弦度量下的几何结构;我们进一步提供非渐近误差界,将重构精度与得分序列长度关联。除方法外,论文还揭示了实际隐私风险:公开细粒度信任得分可能泄露设备及评估模型的潜在行为信息。因此讨论了应对措施——得分量化、校准噪声、混淆嵌入空间,并将其置于网络化AI系统中透明性与保密性的更广泛争论中。所有数据集、复现脚本与扩展证明均附于提交材料,确保结果可验证且无需专有代码。

原文摘要 · Abstract (English)

We study the inverse problem of reconstructing high-dimensional trust embeddings from the one-dimensional Siamese trust scores that many distributed-security frameworks expose. Starting from two independent agents that publish time-stamped similarity scores for the same set of devices, we formalise the estimation task, derive an explicit direct-sum estimator that concatenates paired score series with four moment features, and prove that the resulting reconstruction map admits a unique fixed point under a contraction argument rooted in Banach theory. A suite of synthetic benchmarks (20 devices x 10 time steps) confirms that, even in the presence of Gaussian noise, the recovered embeddings preserve inter-device geometry as measured by Euclidean and cosine metrics; we complement these experiments with non-asymptotic error bounds that link reconstruction accuracy to score-sequence length. Beyond methodology, the paper demonstrates a practical privacy risk: publishing granular trust scores can leak latent behavioural information about both devices and evaluation models. We therefore discuss counter-measures -- score quantisation, calibrated noise, obfuscated embedding spaces -- and situate them within wider debates on transparency versus confidentiality in networked AI systems. All datasets, reproduction scripts and extended proofs accompany the submission so that results can be verified without proprietary code.

信任建模隐私安全嵌入重构

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。