Extremal Mechanisms for Pointwise Maximal Leakage

TL;DR

This paper investigates the privacy-utility tradeoff under pointwise maximal leakage (PML), deriving optimal mechanisms and solutions for local differential privacy scenarios using convex analysis and linear programming.

Contribution

It introduces a comprehensive analysis of PML, providing closed-form solutions and a linear program for optimal privacy mechanisms in various settings.

Findings

Derived closed-form solutions for optimal privacy-utility tradeoffs.

Analyzed the behavior of randomized response mechanisms under different priors.

Presented a linear program to compute optimal mechanisms for PML.

Abstract

Data publishing under privacy constraints can be achieved with mechanisms that add randomness to data points when released to an untrusted party, thereby decreasing the data's utility. In this paper, we analyze this privacy-utility tradeoff for the pointwise maximal leakage privacy measure and a general class of convex utility functions. Pointwise maximal leakage (PML) was recently proposed as an operationally meaningful privacy measure based on two equivalent threat models: An adversary guessing a randomized function and an adversary aiming to maximize a general gain function. We study the behavior of the randomized response mechanism designed for local differential privacy under different prior distributions of the private data. Motivated by the findings of this analysis, we derive several closed-form solutions for the optimal privacy-utility tradeoff in the presented PML context using tools from convex analysis. Finally, we present a linear program that can compute optimal mechanisms for PML in a general setting.