4 Local differential privacy for machine learning

 

This chapter covers

  • Local differential privacy (LDP)
  • Implementing the randomized response mechanism for LDP
  • LDP mechanisms for one-dimensional data frequency estimation
  • Implementing and experimenting with different LDP mechanisms for one-dimensional data

In the previous two chapters we discussed centralized differential privacy (DP), where there is a trusted data curator who collects data from individuals and applies different techniques to obtain differentially private statistics about the population. Then the curator publishes privacy-preserving statistics about this population. However, these techniques are unsuitable when individuals do not completely trust the data curator. Hence, various techniques to satisfy DP in the local setting have been studied to eliminate the need for a trusted data curator. In this chapter we will walk through the concept, mechanisms, and applications of the local version of DP, local differential privacy (LDP).

This chapter will mainly look at how LDP can be implemented in ML algorithms by looking at different examples and implementation code. In the next chapter we’ll also walk you through a case study of applying LDP naive Bayes classification for real-world datasets.

CH04_00_UN01_Zhuang

4.1 What is local differential privacy?

4.1.1 The concept of local differential privacy

4.1.2 Randomized response for local differential privacy

4.2 The mechanisms of local differential privacy

4.2.1 Direct encoding

4.2.2 Histogram encoding

4.2.3 Unary encoding

Summary

sitemap