Information-theoretic (IT) measures based on $f$-divergences have recently gained interest as a measure of privacy leakage as they allow for trading off privacy against utility using only a single-value characterization. However, their operational interpretations in the privacy context are unclear. In this paper, we relate the notion of probabilistic information privacy (IP) to several IT privacy metrics based on $f$-divergences. We interpret probabilistic IP under both the detection and estimation frameworks and link it to differential privacy, thus allowing a precise operational interpretation of these IT privacy metrics. We show that the $\chi^2$-divergence privacy metric is stronger than those based on total variation distance and Kullback-Leibler divergence. Therefore, we further develop a data-driven empirical risk framework based on the $\chi^2$-divergence privacy metric and realized using deep neural networks. This framework is agnostic to the adversarial attack model. Empirical experiments demonstrate the efficacy of our approach.
翻译:以美元波动率为基础的信息理论(IT)措施最近作为一种衡量隐私泄漏的措施引起了人们的兴趣,因为这种措施只允许使用单一价值特征来交换隐私与公用事业的交换,但是,在隐私方面的操作解释并不明确。在本文件中,我们将概率信息隐私的概念与基于美元波动率的若干信息技术隐私衡量标准联系起来。我们在探测和估算框架下解释概率性知识产权,并将其与差异隐私联系起来,从而允许对这些信息技术隐私衡量标准进行精确的业务解释。我们表明,$\chi%2美元差异性隐私衡量标准比基于完全变异距离和库尔贝克-利贝尔差异的衡量标准更强。因此,我们进一步根据以美元2美元差异率为基础的数据驱动的经验风险框架,并利用深神经网络加以实现。这一框架是对抗性攻击模式的标志性。 经验实验证明了我们的方法的有效性。