Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
VeriX-Anon is introduced as a multi-layered framework to verify the faithful execution of outsourced k-anonymization algorithms. It combines deterministic verification using Merkle hashing of decision trees, probabilistic verification using boundary sentinels and exact-duplicate twins, and utility-based verification via SHAP value distribution comparison. Experiments against various adversaries on three datasets demonstrate VeriX-Anon's ability to detect deviations, highlighting the necessity of a multi-layered approach and adaptive thresholding for imbalanced datasets.
Outsourcing data anonymization? VeriX-Anon lets you mathematically verify the cloud provider actually did what they promised, catching even sophisticated attacks that fool single-layer defenses.
Organisations increasingly outsource privacy-sensitive data transformations to cloud providers, yet no practical mechanism lets the data owner verify that the contracted algorithm was faithfully executed. VeriX-Anon is a multi-layered verification framework for outsourced Target-Driven k-anonymization combining three orthogonal mechanisms: deterministic verification via Merkle-style hashing of an Authenticated Decision Tree, probabilistic verification via Boundary Sentinels near the Random Forest decision boundary and exact-duplicate Twins with cryptographic identifiers, and utility-based verification via Explainable AI fingerprinting that compares SHAP value distributions before and after anonymization using the Wasserstein distance. Evaluated on three cross-domain datasets against Lazy (drops 5 percent of records), Dumb (random splitting, fake hash), and Approximate (random splitting, valid hash) adversaries, VeriX-Anon correctly detected deviations in 11 of 12 scenarios. No single layer achieved this alone. The XAI layer was the only mechanism that caught the Approximate adversary, succeeding on Adult and Bank but failing on the severely imbalanced Diabetes dataset where class imbalance suppresses the SHAP signal, confirming the need for adaptive thresholding. An 11-point k-sweep showed Target-Driven anonymization preserves significantly more utility than Blind anonymization (Wilcoxon $p = 0.000977$, Cohen's $d = 1.96$, mean F1 gap $+0.1574$). Client-side verification completes under one second at one million rows. The threat model covers three empirically evaluated profiles and one theoretical profile (Informed Attacker) aware of trap embedding but unable to defeat the cryptographic salt. Sentinel evasion probability ranges from near-zero for balanced datasets to 0.52 for imbalanced ones, a limitation the twin layer compensates for in every tested scenario.