Skip to Main content Skip to Navigation
Conference papers

Optimal Obfuscation Mechanisms via Machine Learning

Abstract : We consider the problem of obfuscating sensitive information while preserving utility, and we propose a machine learning approach inspired by the generative adversarial networks paradigm. The idea is to set up two nets: the generator, that tries to produce an optimal obfuscation mechanism to protect the data, and the classifier, that tries to de-obfuscate the data. By letting the two nets compete against each other, the mechanism improves its degree of protection, until an equilibrium is reached. We apply our method to the case of location privacy, and we perform experiments on synthetic data and on real data from the Gowalla dataset. We evaluate the privacy of the mechanism not only by its capacity to defeat the classifier, but also in terms of the Bayes error, which represents the strongest possible adversary. We compare the privacy-utility tradeoff of our method to that of the planar Laplace mechanism used in geo-indistinguishability, showing favorable results. Like the Laplace mechanism, our system can be deployed at the user end for protecting his location.
Complete list of metadatas
Contributor : Catuscia Palamidessi <>
Submitted on : Thursday, December 31, 2020 - 10:11:37 AM
Last modification on : Monday, January 11, 2021 - 2:55:20 PM

Links full text


  • HAL Id : hal-03091514, version 1
  • ARXIV : 1904.01059



Marco Romanelli, Konstantinos Chatzikokolakis, Catuscia Palamidessi. Optimal Obfuscation Mechanisms via Machine Learning. CSF 2020 : 33rd IEEE Computer Security Foundations Symposium, 2020, Online, United States. pp.153-168. ⟨hal-03091514⟩



Record views