what can a click really reveal? the utility and privacy ... · conclusion • we precisely measure...

32
What Can a Click Really Reveal? The Utility and Privacy Effects of a Click 1 Rachid Guerraoui Anne-Marie Kermarrec Mahsa Taziki

Upload: others

Post on 14-Aug-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

What Can a Click Really Reveal? The Utility and Privacy Effects of a Click

1

Rachid Guerraoui Anne-Marie Kermarrec

Mahsa Taziki

Page 2: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

What happens when you access online services?

2

Clicks

Recommendations

Utility

Privacy

Trade-off?Always

Page 3: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• The Click-advisor diagram

3

Page 4: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• The Click-advisor diagram

4

Page 5: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

How to measure utility?

• A commonality-based utility measure (Commonality of a user profile)

5

Utility of a click

Commonality

=

- +

Page 6: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Commonality - Example

6

Commonality = 0

Commonality = 0.375

Page 7: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Commonality in Perspective

7

Page 8: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• The Click-advisor diagram

8

Page 9: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Disclosure risk of a click

How to measure privacy?

• An entropy-based privacy measure (Disclosure degree of a user profile)

9

Disclosure Degree

=

- +

Page 10: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Disclosure Degree - Example

10

Commonality = 0

Commonality = 0.375 = 0.9

= 1.2

Page 11: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Disclosure Degree in Perspective

11

Page 12: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• The Click-advisor diagram

12

Page 13: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

• Clicks that induce a trade-off between utility and privacy: 78.40 %

• Clicks that improve both utility and privacy: 5.12 %

• Clicks that improves neither utility nor privacy: 16.48 %

13

How utility and privacy are connected?

Example: Movielens 100K dataset

Page 14: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Different Effects of Clicks

14

Page 15: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• The Click-advisor diagram

15

Page 16: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• The Click-advisor diagram - The zone of a click

16

Page 17: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The Zone of a Click

17

Safe

Deleterious

Dangerous

Trade-off

Trade-off

Page 18: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• Click-advisor diagram - The zone of a click - The click-advisor diagram

18

Page 19: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Recommendations

19

Toy Story

Greenberg

The Switch

Page 20: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Pre-clicks

20

Toy Story

Greenberg

The Switch

Page 21: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The Click-advisor Diagram

21

TToy Story

Greenberg

The Switch

Page 22: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• Click-advisor diagram - The zone of a click - The click-advisor diagram - The user actions

22

Page 23: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The User Actions

23

TToy Story

Greenberg

The Switch

You like “Toy Story”. This click is in a safe zone. So, it improves both utility and privacy for you. Do you want to:

Page 24: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Outline• Quantifying the utility and privacy effects of a click

- How to measure utility? - How to measure privacy? - How utility and privacy are connected?

• Click-advisor diagram - The zone of a click - The click-advisor diagram - The user actions - The clicking game

24

Page 25: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The Clicking Game

25

Page 26: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The Clicking Game

• Reward function

26

Page 27: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The Clicking Game

• Reward function

• Users actions

27

Confirm / Change / Cancel

Page 28: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

The Clicking Game

• Reward function

• User actions

• Clicking strategies

28

Page 29: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Clicking Strategies

• Basic: confirms all the pre-clicks.

• Careful: confirms the safe and trade-off pre-clicks; otherwise, cancels.

• Smart: confirms the safe and trade-off pre-clicks;

cancels the deleterious pre-clicks;

changes the dangerous pre-clicks.

29

Page 30: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Clicking Game (1)

All users playing smart is a Nash equilibrium, i.e., playing the smart strategy maximizes the reward function for a user u, if every user other than u plays smart.

30

Page 31: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Clicking Game (2)

The overall average of the recommender utility for all users playing the smart strategy is the same as the case where users click on items based on their real preferences. However, with regard to privacy, the smart strategy provides better privacy compared to the basic strategy.

31

Page 32: What Can a Click Really Reveal? The Utility and Privacy ... · Conclusion • We precisely measure the utility and privacy effects of a click. • We show that there is not always

Conclusion

• We precisely measure the utility and privacy effects of a click.

• We show that there is not always a trade-off between utility and privacy.

• The click-advisor diagram makes users aware of the utility and privacy effects of their clicks.

• Consulting the click-advisor, the users can adopt a clicking strategy to improve their privacy without decreasing the overall recommender utility.

32