Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces Fully Oblivious Differential Privacy (FODP) to enhance the security of frequency estimation in the augmented shuffle model, addressing vulnerabilities to collusion attacks. By leveraging Trusted Execution Environments (TEEs) and a novel privacy notion, FODP mitigates side-channel attacks while maintaining high accuracy. The proposed framework includes three concrete algorithms that optimize efficiency through count-min sketch techniques, showing significant improvements over nine baseline methods in experimental evaluations on Intel SGX.
FODP effectively thwarts collusion attacks in differential privacy by ensuring shufflers remain trustworthy, even in the presence of TEEs.
In the shuffle model of DP (Differential Privacy), a shuffler randomly permutes users'data to achieve high accuracy and privacy. Recent studies show that most existing shuffle protocols are vulnerable to collusion attacks by the data collector and users. They address this issue by introducing the augmented shuffle model that incorporates random sampling and dummy data addition into the shuffler. However, it remains open how to ensure the shuffler follows the protocol and does not collude with the data collector in this model. We address this trust issue by thoroughly exploring the augmented shuffle model with TEEs (Trusted Execution Environments). We first introduce a new privacy notion, FODP (Fully Oblivious DP), which strengthens DP to prevent various TEE side-channel attacks based on external/internal memory access patterns and control flows. We propose a general framework for FODP algorithms based on memory-size obfuscation and three concrete algorithms within it. We also improve the efficiency of our algorithms by using the count-min sketch and optimizing the number of hashes. We evaluate our algorithms on Intel SGX and demonstrate their effectiveness through comparisons with nine baselines.