On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attacks

arXiv:2403.19510v1 Announce Type: new
Abstract: Recent studies reveal that local differential privacy (LDP) protocols are vulnerable to data poisoning attacks where an attacker can manipulate the final estimate on the server by leveraging the characteristics of LDP and sending carefully crafted data from a small fraction of controlled local clients. This vulnerability raises concerns regarding the robustness and reliability of LDP in hostile environments.
In this paper, we conduct a systematic investigation of the robustness of state-of-the-art LDP protocols for …

arxiv attacker attacks attributes can cs.cr data data poisoning differential privacy local poisoning poisoning attacks privacy protocols reveal robustness server studies under vulnerable