Aegis通过相关性分析,快速选出隐私保护下数据效用最优的脱敏方案。
Aegis: A Correlation-Based Data Masking Advisor for Data Sharing Ecosystems
- 基于特征-标签相关性变化评估,自动选择最优脱敏配置
- 在真实数据集上比基线快10倍以上,性能相当
- 仅需少量统计摘要,适合原始数据不可见的场景
数据共享生态系统连接提供方、使用者和中介方,支持各类下游任务的数据交换。在医疗等敏感领域,隐私必须作为硬约束,所有共享数据须满足最低隐私阈值。然而,在满足该要求的多种脱敏配置中,数据效用差异显著,核心挑战在于如何高效选择保留最大效用的配置。本文提出Aegis,一种用于带特征和类别标签的机器学习数据集的中间件框架,其效用优化器最小化预测效用偏差,量化脱敏导致的特征-标签相关性变化。该框架利用有限的数据摘要(如一维直方图)或无原始数据,估算特征-标签联合分布,适用于因隐私限制无法访问原始数据的场景。为此,我们提出基于迭代比例拟合的联合分布估计方法,支持互信息、卡方检验、g3等多种相关性度量方式。对真实世界数据集的实验表明,Aegis在超过一个数量级的速度下识别出最优脱敏配置,且生成的脱敏数据在下游机器学习任务上的预测性能与基线相当,并可补充隐私匿名化数据脱敏技术。
原文摘要 · Abstract (English)
Data sharing ecosystems connect providers, consumers, and intermediaries to facilitate the exchange and use of data for a wide range of downstream tasks. In sensitive domains such as healthcare, privacy is enforced as a hard constraint, any shared data must satisfy a minimum privacy threshold. However, among all masking configurations that meet this requirement, the utility of the masked data can vary significantly, posing a key challenge: how to efficiently select the optimal configuration that preserves maximum utility. This paper presents Aegis, a middleware framework that selects optimal masking configurations for machine learning datasets with features and class labels. Aegis incorporates a utility optimizer that minimizes predictive utility deviation, quantifying shifts in feature label correlations due to masking. Our framework leverages limited data summaries (such as 1D histograms) or none to estimate the feature label joint distribution, making it suitable for scenarios where raw data is inaccessible due to privacy restrictions. To achieve this, we propose a joint distribution estimator based on iterative proportional fitting, which allows supporting various feature label correlation quantification methods such as mutual information, chi square, or g3. Our experimental evaluation of real world datasets shows that Aegis identifies optimal masking configurations over an order of magnitude faster, while the resulting masked datasets achieve predictive performance on downstream ML tasks on par with baseline approaches and complements privacy anonymization data masking techniques.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。