An Extension of the Adversarial Threat Model in Quantitative Information Flow

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Zarrabian, Mohammad Amin, Sadeghi, Parastoo
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912409847857152
author Zarrabian, Mohammad Amin
Sadeghi, Parastoo
author_facet Zarrabian, Mohammad Amin
Sadeghi, Parastoo
contents In this paper, we propose an extended framework for quantitative information flow (QIF), aligned with the previously proposed core-concave generalization of entropy measures, to include adversaries that use Kolmogorov-Nagumo $f$-mean to infer secrets in a private system. Specifically, in our setting, an adversary uses Kolmogorov-Nagumo $f$-mean to compute its best actions before and after observing the system's randomized outputs. This leads to generalized notions of prior and posterior vulnerability and generalized axiomatic relations that we will derive to elucidate how these $f$-mean based vulnerabilities interact with each other. We demonstrate the usefulness of this framework by showing how some notions of leakage that had been derived outside of the QIF framework and so far seemed incompatible with it are indeed explainable via such an extension of QIF. These leakage measures include $α$-leakage, which is the same as Arimoto mutual information of order $α$, maximal $α$-leakage, which is the $α$-leakage capacity, and maximal $(α,β)$-leakage, which is a generalization of the above and captures local differential privacy as a special case. We define the notion of generalized capacity and provide partial results for special classes of functions used in the Kolmogorov-Nagumo mean. We also propose a new pointwise notion of gain function, which we coin pointwise information gain. We show that this pointwise information gain can explain R{é}yni divergence and Sibson mutual information of order $α\in [0,\infty]$ as the Kolmogorov-Nagumo average of the gain with a proper choice of function $f$.
format Preprint
id arxiv_https___arxiv_org_abs_2409_04108
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle An Extension of the Adversarial Threat Model in Quantitative Information Flow
Zarrabian, Mohammad Amin
Sadeghi, Parastoo
Information Theory
In this paper, we propose an extended framework for quantitative information flow (QIF), aligned with the previously proposed core-concave generalization of entropy measures, to include adversaries that use Kolmogorov-Nagumo $f$-mean to infer secrets in a private system. Specifically, in our setting, an adversary uses Kolmogorov-Nagumo $f$-mean to compute its best actions before and after observing the system's randomized outputs. This leads to generalized notions of prior and posterior vulnerability and generalized axiomatic relations that we will derive to elucidate how these $f$-mean based vulnerabilities interact with each other. We demonstrate the usefulness of this framework by showing how some notions of leakage that had been derived outside of the QIF framework and so far seemed incompatible with it are indeed explainable via such an extension of QIF. These leakage measures include $α$-leakage, which is the same as Arimoto mutual information of order $α$, maximal $α$-leakage, which is the $α$-leakage capacity, and maximal $(α,β)$-leakage, which is a generalization of the above and captures local differential privacy as a special case. We define the notion of generalized capacity and provide partial results for special classes of functions used in the Kolmogorov-Nagumo mean. We also propose a new pointwise notion of gain function, which we coin pointwise information gain. We show that this pointwise information gain can explain R{é}yni divergence and Sibson mutual information of order $α\in [0,\infty]$ as the Kolmogorov-Nagumo average of the gain with a proper choice of function $f$.
title An Extension of the Adversarial Threat Model in Quantitative Information Flow
topic Information Theory
url https://arxiv.org/abs/2409.04108