Privacy-Preserving Data Analytics

Real-time processing of user data streams in online services inadvertently creates tension between the users and analysts: users are looking for stronger privacy, while analysts desire for higher utility data analytics in real time. To resolve this tension, this paper describes the design, implementation and evaluation of PRIVAPPROX, a data analytics system for privacy-preserving stream processing. PRIVAPPROX provides three important properties: (i) Privacy: zero-knowledge privacy guarantee for users, a privacy bound tighter than the state-of-the-art differential privacy; (ii) Utility: an interface for data analysts to systematically explore the trade-offs between the output accuracy (with error estimation) and the query execution budget; (iii) Latency: near real-time stream processing based on a scalable “synchronization-free” distributed architecture. The key idea behind PRIVAPPROX is to combine two techniques together, namely, sampling (used for approximate computation) and randomized response (used for privacy-preserving analytics). The resulting combination is complementary — it achieves stronger privacy guarantees, and also improves the performance for stream analytics. Do Le Quoc TU Dresden, e-mail: do.le_quoc@tu-dresden.de Martin Beck TU Dresden, e-mail: martin.beck1@tu-dresden.de Pramod Bhatotia University of Edinburgh and Alan Turing Institute, e-mail: pramod.bhatotia@ed.ac.uk Ruichuan Chen Nokia Bell Labs, e-mail: ruichuan.chen@nokia-bell-labs.com Christof Fetzer TU Dresden, e-mail: christof.fetzer@tu-dresden.de Thorsten Strufe TU Dresden, e-mail: thorsten.strufe@tu-dresden.de