RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response
arXiv:1407.6981 · doi:10.1145/2660267.2660348
Abstract
Randomized Aggregatable Privacy-Preserving Ordinal Response, or RAPPOR, is a technology for crowdsourcing statistics from end-user client software, anonymously, with strong privacy guarantees. In short, RAPPORs allow the forest of client data to be studied, without permitting the possibility of looking at individual trees. By applying randomized response in a novel manner, RAPPOR provides the mechanisms for such collection as well as for efficient, high-utility analysis of the collected data. In particular, RAPPOR permits statistics to be collected on the population of client-side strings with strong privacy guarantees for each client, and without linkability of their reports. This paper describes and motivates RAPPOR, details its differential-privacy and utility guarantees, discusses its practical deployment and properties in the face of different attack models, and, finally, gives results of its application to both synthetic and real-world data.
14 pages, accepted at ACM CCS 2014
References in corpus (3)
Cited by in corpus (114)
- Technical Privacy Metrics: a Systematic Survey
- Local, Private, Efficient Protocols for Succinct Histograms
- Prochlo: Strong Privacy for Analytics in the Crowd
- LoPub: High-Dimensional Crowdsourced Data Publication with Local Differential Privacy
- Local Differential Privacy for Deep Learning
- Security and Privacy Approaches in Mixed Reality: A Literature Survey
- Federated Social Recommendation with Graph Neural Network
- DarkneTZ: Towards Model Privacy at the Edge using Trusted Execution Environments
- More Than Privacy: Applying Differential Privacy in Key Areas of Artificial Intelligence
- The Long Road to Computational Location Privacy: A Survey
- Distributed Differential Privacy via Shuffling
- Privacy Preserving Face Recognition Utilizing Differential Privacy
- Federated Learning and Differential Privacy: Software tools analysis, the Sherpa.ai FL framework and methodological guidelines for preserving data privacy
- Context-Aware Generative Adversarial Privacy
- Deep Learning Methods for Fingerprint-Based Indoor Positioning: A Review
- A Comprehensive Survey on Local Differential Privacy Toward Data Statistics and Analysis
- Issues Encountered Deploying Differential Privacy
- A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learning
- LDP-IDS: Local Differential Privacy for Infinite Data Streams
- LDPTrace: Locally Differentially Private Trajectory Synthesis
- Differential Privacy for Eye Tracking with Temporal Correlations
- Frequency Estimation under Local Differential Privacy [Experiments, Analysis and Benchmarks]
- LightDP: Towards Automating Differential Privacy Proofs
- Privacy-preserving Distributed Machine Learning via Local Randomization and ADMM Perturbation
- Real-World Trajectory Sharing with Local Differential Privacy
- TIPRDC: Task-Independent Privacy-Respecting Data Crowdsourcing Framework for Deep Learning with Anonymized Intermediate Representations
- Comparative Study of Differentially Private Data Synthesis Methods
- Advanced Probabilistic Couplings for Differential Privacy
- "I need a better description'': An Investigation Into User Expectations For Differential Privacy
- Proving Differential Privacy with Shadow Execution
- On the Protection of Private Information in Machine Learning Systems: Two Recent Approaches
- DeepObfuscator: Obfuscating Intermediate Representations with Privacy-Preserving Adversarial Learning on Smartphones
- Exploring Design and Governance Challenges in the Development of Privacy-Preserving Computation
- Ektelo: A Framework for Defining Differentially-Private Computations
- CheckDP: An Automated and Integrated Approach for Proving Differential Privacy or Finding Precise Counterexamples
- Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective
- Improving the utility of locally differentially private protocols for longitudinal and multidimensional frequency estimates
- Pointwise Maximal Leakage
- Chorus: a Programming Framework for Building Scalable Differential Privacy Mechanisms
- Successive Point-of-Interest Recommendation with Local Differential Privacy
- Secure Hot Path Crowdsourcing with Local Differential Privacy under Fog Computing Architecture
- Learning Privacy-Preserving Student Networks via Discriminative-Generative Distillation
- Random Sampling Plus Fake Data: Multidimensional Frequency Estimates With Local Differential Privacy
- Talek: Private Group Messaging with Hidden Access Patterns
- PriPeARL: A Framework for Privacy-Preserving Analytics and Reporting at LinkedIn
- Don't Look at the Data! How Differential Privacy Reconfigures the Practices of Data Science
- Differential Privacy of Hierarchical Census Data: An Optimization Approach
- Hide me Behind the Noise: Local Differential Privacy for Indoor Location Privacy
- On the Risks of Collecting Multidimensional Data Under Local Differential Privacy
- Federated Bandit: A Gossiping Approach
- BLENDER: Enabling Local Search with a Hybrid Differential Privacy Model
- Quantum Pufferfish Privacy: A Flexible Privacy Framework for Quantum Systems
- Privacy-Preserving Federated Learning with Differentially Private Hyperdimensional Computing
- Differential Privacy for Government Agencies -- Are We There Yet?
- InaudibleKey: Generic Inaudible Acoustic Signal based Key Agreement Protocol for Mobile Devices
- Reconstruction Attack on Differential Private Trajectory Protection Mechanisms
- Local Obfuscation Mechanisms for Hiding Probability Distributions
- STAR: Secret Sharing for Private Threshold Aggregation Reporting
- Extremal Mechanisms for Pointwise Maximal Leakage
- Aggregation and Transformation of Vector-Valued Messages in the Shuffle Model of Differential Privacy
- Network Shuffling: Privacy Amplification via Random Walks
- Bayes Security: A Not So Average Metric
- Multi-Freq-LDPy: Multiple Frequency Estimation Under Local Differential Privacy in Python
- (Local) Differential Privacy has NO Disparate Impact on Fairness
- DPGen: Automated Program Synthesis for Differential Privacy
- DPCrowd: Privacy-preserving and Communication-efficient Decentralized Statistical Estimation for Real-time Crowd-sourced Data
- PRIVIC: A privacy-preserving method for incremental collection of location data
- Contraction of Private Quantum Channels and Private Quantum Hypothesis Testing
- Private Prediction Sets
- A novel analysis of utility in privacy pipelines, using Kronecker products and quantitative information flow
- Auxo: Efficient Federated Learning via Scalable Client Clustering
- Locality Sensitive Hashing with Extended Differential Privacy
- Advances in Differential Privacy and Differentially Private Machine Learning
- Privacy-preserving Crowd-guided AI Decision-making in Ethical Dilemmas
- Generating Poisson-Distributed Differentially Private Synthetic Data
- Differentially Private Confidence Intervals for Proportions under Stratified Random Sampling
- Data Poisoning Attacks to Locally Differentially Private Frequent Itemset Mining Protocols
- Revealing the True Cost of Locally Differentially Private Protocols: An Auditing Perspective
- An Incentive Mechanism for Trading Personal Data in Data Markets
- Data-driven software security: Models and methods
- AVeCQ: Anonymous Verifiable Crowdsourcing with Worker Qualities
- Local Differentially Private Fuzzy Counting in Stream Data using Probabilistic Data Structure
- Noiseless Privacy-Preserving Decentralized Learning
- LIA: Privacy-Preserving Data Quality Evaluation in Federated Learning Using a Lazy Influence Approximation
- Exactly Optimal and Communication-Efficient Private Estimation via Block Designs
- Continual Release of Differentially Private Synthetic Data from Longitudinal Data Collections
- Federated learning with differential privacy and an untrusted aggregator
- Anonymizing Sensor Data on the Edge: A Representation Learning and Transformation Approach
- Composition Properties of Bayesian Differential Privacy
- Evaluating Differential Privacy on Correlated Datasets Using Pointwise Maximal Leakage
- Building a Collaborative Phone Blacklisting System with Local Differential Privacy
- Infinite Stream Estimation under Personalized -Event Privacy
- Synthetic Trajectory Generation Through Convolutional Neural Networks
- On the Utility Gain of Iterative Bayesian Update for Locally Differentially Private Mechanisms
- A Communication-efficient Local Differentially Private Algorithm in Federated Optimization
- Noise Variance Optimization in Differential Privacy: A Game-Theoretic Approach Through Per-Instance Differential Privacy
- Establishing the Price of Privacy in Federated Data Trading
- Sharper Utility Bounds for Differentially Private Models
- Improving Utility and Security of the Shuffler-based Differential Privacy
- "I inherently just trust that it works": Investigating Mental Models of Open-Source Libraries for Differential Privacy
- Nebula: Efficient, Private and Accurate Histogram Estimation
- Adaptive Statistical Learning with Bayesian Differential Privacy
- Fine-grained Manipulation Attacks to Local Differential Privacy Protocols for Data Streams
- Metric Differential Privacy at the User-Level Via the Earth Mover's Distance
- Improving Count-Mean Sketch as the Leading Locally Differentially Private Frequency Estimator for Large Dictionaries
- An Information Theoretic approach to Post Randomization Methods under Differential Privacy
- DiPPS: Differentially Private Propensity Scores for Bias Correction
- Efficient Privacy-Preserved Processing of Multimodal Data for Vehicular Traffic Analysis
- Unleash the Power of Ellipsis: Accuracy-enhanced Sparse Vector Technique with Exponential Noise
- Improving Frequency Estimation under Local Differential Privacy
- SoK: Practical Aspects of Releasing Differentially Private Graphs
- Sample Complexity Bounds for Scalar Parameter Estimation Under Quantum Differential Privacy
- Relations among different privacy notions
- Differentially Private Fair Division