A Strong Separation for Adversarially Robust $\ell_0$ Estimation for Linear Sketches

TL;DR

This paper demonstrates new adaptive attacks against linear sketches for $\,\ell_0$-estimation in streaming models, significantly reducing the number of queries needed to break such sketches and highlighting their vulnerabilities.

Contribution

It introduces the first known adaptive attacks on linear sketches for $\,\ell_0$-estimation, with improved query complexity over previous bounds.

Findings

Adaptive attacks succeed with high probability using fewer queries.

Breaks the security of linear sketches in various algebraic settings.

Provides exponential improvements over prior query complexity bounds.

Abstract

The majority of streaming problems are defined and analyzed in a static setting, where the data stream is any worst-case sequence of insertions and deletions that is fixed in advance. However, many real-world applications require a more flexible model, where an adaptive adversary may select future stream elements after observing the previous outputs of the algorithm. Over the last few years, there has been increased interest in proving lower bounds for natural problems in the adaptive streaming model. In this work, we give the first known adaptive attack against linear sketches for the well-studied $\ell_0$-estimation problem over turnstile, integer streams. For any linear streaming algorithm $\mathcal{A}$ that uses sketching matrix $\mathbf{A}\in \mathbb{Z}^{r \times n}$ where $n$ is the size of the universe, this attack makes $\tilde{\mathcal{O}}(r^8)$ queries and succeeds with high constant probability in breaking the sketch. We also give an adaptive attack against linear sketches for the $\ell_0$-estimation problem over finite fields $\mathbb{F}_p$, which requires a smaller number of $\tilde{\mathcal{O}}(r^3)$ queries. Finally, we provide an adaptive attack over $\mathbb{R}^n$ against linear sketches $\mathbf{A} \in \mathbb{R}^{r \times n}$ for $\ell_0$-estimation, in the setting where $\mathbf{A}$ has all nonzero subdeterminants at least $\frac{1}{\textrm{poly}(r)}$. Our results provide an exponential improvement over the previous number of queries known to break an $\ell_0$-estimation sketch.