A Real-Time Privacy Monitoring System for Multi-Tasks-Based Privacy-Disclosure in Crowdsourcing

Wei Chang
DOI: https://doi.org/10.1109/access.2024.3513796
IF: 3.9
2024-12-18
IEEE Access
Abstract:Crowdsourcing provides open platforms where people worldwide can post or participate in some tasks. However, its open feature also creates security and privacy issues. In this paper, we first demonstrate that malicious attackers can infer some participants' sensitive information by linking their responses to multiple seemingly unrelated crowdsourcing survey tasks. What makes the linkage attack in crowdsourcing different from the traditional privacy-preserved data publishing is that the data collectors are malicious: they can immediately see a survey participant's responded information once submitted and even can intentionally design "follow-up" surveys to dig more data about the target user. To protect against this new vulnerability in crowdsourcing, we propose a personal Privacy Monitoring System (PMS), which tracks the user's maximum accumulated privacy disclosure probability in real time based on historically released information. Existing works mainly focus on static data, but daily life experiences tell us that some attribute values may change over time, and some initially sensitive information may become non-sensitive. Attackers may adopt fuzzy matches to handle the inconsistent data during the linkage attacks. We conduct extensive simulations to study the impacts of changeable sensitive and regular attribute values and fuzzy matches on privacy leakages and evaluate the performance of PMS in various situations.
computer science, information systems,telecommunications,engineering, electrical & electronic
What problem does this paper attempt to address?