1 / 3

Adding Privacy to Netflix Recommendations Frank McSherry, Ilya Mironov (MSR SVC)

Adding Privacy to Netflix Recommendations Frank McSherry, Ilya Mironov (MSR SVC). Attacks on Recommender Systems — No “blending in”, auxiliary information — Differencing attacks/active attacks — Potential threats: — re-identification, linking of profiles — business, legal liabilities.

cid
Télécharger la présentation

Adding Privacy to Netflix Recommendations Frank McSherry, Ilya Mironov (MSR SVC)

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Adding Privacy to Netflix Recommendations Frank McSherry, Ilya Mironov (MSR SVC) • Attacks on Recommender Systems • — No “blending in”, auxiliary information • — Differencing attacks/active attacks • — Potential threats: • — re-identification, linking of profiles • — business, legal liabilities “Users like you” • “Enjoyed by members who enjoyed” ? A B C A A C B F D : D E ? C E

  2. Differential Privacy • Strong formal privacy definition. Informally: • “Any output of the computation is as likely with your data as without.” Privacy for a Count: How Many Ratings? • Any output is as likely with your data as without. Current Architectures: Private Architecture: DP

  3. Netflix Prize Dataset 17K movies 480K people 100M ratings 3M unknowns $1M for beating the benchmark by 10% Differentially Private Recommendation Global effects (movie/user averages) Movie-movie covariance matrix Leading “geometric” Netflix algorithms DP Accuracy-Privacy Tradeoff Cost of Privacy over Time

More Related