Pointwise Maximal Leakage

We introduce a privacy measure called pointwise maximal leakage , generalizing the pre-existing notion of maximal leakage , which quantifies the amount of information leaking about a secret X by disclosing a single outcome of a (randomized) function calculated on X . Pointwise maximal leakage is a r...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on information theory 2023-12, Vol.69 (12), p.1-1
Main Authors: Saeidian, Sara, Cervia, Giulia, Oechtering, Tobias J., Skoglund, Mikael
Format: Article
Language:English
Subjects:
<italic xmlns:ali="http://www.niso.org/schemas/ali/1.0/" xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">g -leakage
Computer Science
Differential privacy
g-leakage
Gain measurement
information leakage
Information Theory
Leakage
Mathematical analysis
maximal leakage
Privacy
Random variables
Risk assessment
Robustness
Surveys
Threat modeling
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:We introduce a privacy measure called pointwise maximal leakage , generalizing the pre-existing notion of maximal leakage , which quantifies the amount of information leaking about a secret X by disclosing a single outcome of a (randomized) function calculated on X . Pointwise maximal leakage is a robust and operationally meaningful privacy measure that captures the largest amount of information leaking about X to adversaries seeking to guess arbitrary (possibly randomized) functions of X , or equivalently, aiming to maximize arbitrary gain functions. We study several properties of pointwise maximal leakage, e.g., how it composes over multiple outcomes, how it is affected by pre-and post-processing, etc. Furthermore, we propose to view information leakage as a random variable which, in turn, allows us to regard privacy guarantees as requirements imposed on different statistical properties of the information leakage random variable. We define several privacy guarantees and study how they behave under pre-processing, post-processing and composition. Finally, we examine the relationship between pointwise maximal leakage and other privacy notions such as local differential privacy, local information privacy, f -information, and so on. Overall, our paper constructs a robust and flexible framework for privacy risk assessment whose central notion has a strong operational meaning which can be adapted to a variety of applications and practical scenarios.
ISSN:0018-9448
1557-9654
1557-9654
DOI:10.1109/TIT.2023.3304378