Abstract:Differential privacy is the state-of-the-art formal definition for data release under strong privacy guarantees. A variety of mechanisms have been proposed in the literature for releasing the output of numeric queries (e.g., the Laplace mechanism and smooth sensitivity mechanism). Those mechanisms guarantee differential privacy by adding noise to the true query's output. The amount of noise added is calibrated by the notions of global sensitivity and local sensitivity of the query that measure the impact of the addition or removal of an individual on the query's output. Mechanisms that use local sensitivity add less noise and, consequently, have a more accurate answer. However, although there has been some work on generic mechanisms for releasing the output of non-numeric queries using global sensitivity (e.g., the Exponential mechanism), the literature lacks generic mechanisms for releasing the output of non-numeric queries using local sensitivity to reduce the noise in the query's output. In this work, we remedy this shortcoming and present the local dampening mechanism . We adapt the notion of local sensitivity for the non-numeric setting and leverage it to design a generic non-numeric mechanism. We provide theoretical comparisons to the exponential mechanism and show under which conditions the local dampening mechanism is more accurate than the exponential mechanism. We illustrate the effectiveness of the local dampening mechanism by applying it to three diverse problems: (i) percentile selection problem. We report the p -th element in the database; (ii) Influential node analysis. Given an influence metric, we release the top-k most influential nodes while preserving the privacy of the relationship between nodes in the network; (iii) Decision tree induction. We provide a private adaptation to the ID3 algorithm to build decision trees from a given tabular dataset. Experimental evaluation shows that we can reduce the error for percentile selection application up to , reduce the use of privacy budget by 2 to 4 orders of magnitude for influential node analysis application, and increase accuracy up to for decision tree induction when compared to global sensitivity-based approaches. Finally, to illustrate the scalability of our local dampening mechanism, we empirically evaluate its runtime performance for the influential node analysis problem and show a sub-quadratic behavior.

Zip to Zip-it: Compression to Achieve Local Differential Privacy

Breaking the Communication-Privacy-Accuracy Tradeoff with F-Differential Privacy

Privacy-Aware Compression for Federated Data Analysis

Utility Analysis and Enhancement of LDP Mechanisms in High-Dimensional Space

Differentially Private Numerical Vector Analyses in the Local and Shuffle Model

Local Differential Privacy for data collection and analysis

Privacy-Preserving Set-Based Estimation Using Differential Privacy and Zonotopes

Joint Privacy Enhancement and Quantization in Federated Learning

Secure Medical Data Collection via Local Differential Privacy

Collecting Multidimensional Numerical Data and Estimating Mean with Personalized Local Differential Privacy

Hiding Numerical Vectors in Local Private and Shuffled Messages

Statistical Quantification of Differential Privacy: A Local Approach

Differentially Private Set-Based Estimation Using Zonotopes

Bit-efficient Numerical Aggregation and Stronger Privacy for Trust in Federated Analytics

Mitigating Leakage from Data Dependent Communications in Decentralized Computing using Differential Privacy

Universal Exact Compression of Differentially Private Mechanisms

Preserving differential privacy under finite-precision semantics

Differentially private data aggregating with relative error constraint

Local dampening: differential privacy for non-numeric queries via local sensitivity

Privately Answering Queries on Skewed Data via Per-Record Differential Privacy

Privacy accounting $\varepsilon$conomics: Improving differential privacy composition via a posteriori bounds