Gaussian differential privacy (GDP) is a single-parameter family of privacy notions that provides coherent guarantees to avoid the exposure of sensitive individual information. Despite the extra interpretability and tighter bounds under composition GDP provides, many widely used mechanisms (e.g., the Laplace mechanism) inherently provide GDP guarantees but often fail to take advantage of this new framework because their privacy guarantees were derived under a different background. In this paper, we study the asymptotic properties of privacy profiles and develop a simple criterion to identify algorithms with GDP properties. We propose an efficient method for GDP algorithms to narrow down possible values of an optimal privacy measurement, $\mu$ with an arbitrarily small and quantifiable margin of error. For non GDP algorithms, we provide a post-processing procedure that can amplify existing privacy guarantees to meet the GDP condition. As applications, we compare two single-parameter families of privacy notions, $\epsilon$-DP, and $\mu$-GDP, and show that all $\epsilon$-DP algorithms are intrinsically also GDP. Lastly, we show that the combination of our measurement process and the composition theorem of GDP is a powerful and convenient tool to handle compositions compared to the traditional standard and advanced composition theorems.
翻译:Gaussian 差异隐私(GDP)是一个单一参数的私隐概念大家庭,它为避免敏感个人信息的暴露提供了一致的保障。尽管GDP构成提供了额外的解释和更严格的限制,但许多广泛使用的机制(例如Laplace机制)本身就提供了GDP保障,但往往未能利用这一新框架,因为其隐私保障来自不同背景。在本文中,我们研究了隐私概况的无保护特性,并制定了识别GDP属性算法的简单标准。我们建议了一种高效的GDP算法,以缩小最佳隐私计量的可能值,即美元和任意小和可量化的误差幅度。对于非GDP算法,我们提供了一种后处理程序,可以扩大现有的私隐保障以满足GDP条件。作为应用,我们比较了两个私隐概念的单数家庭,即美元-DP和美元-GDP,并表明所有美元-DP值的算法本质上也是GDP。最后,我们表明,我们测量过程和构成的传统标准组合的组合与国内生产总值的构成相比,是一个强大和方便和先进的工具。