SNAKE challenge: Sanitization Algorithms under Attack

Tristan Allard (1) , Louis Béziaud (2, 1) , Sébastien Gambs (2)

1 SPICY - Security & PrIvaCY
2 UQAM - Université du Québec à Montréal = University of Québec in Montréal

While there were already some privacy challenges organized in the domain of data sanitization, they have mainly focused on the defense side of the problem. To favor the organization of successful challenges focusing on attacks, we introduce the Snake framework that is designed to facilitate the organization of challenges dedicated to attacking existing data sanitization mechanisms. In particular, it enables to easily automate the redundant tasks that are inherent to any such challenge and exhibits the following salient features: genericity with respect to attacks, ease of use and extensibility. We propose to demonstrate the main features of the Snake framework through a specific instantiation focusing on membership inference attacks over differentially-private synthetic data generation schemes. This instance of the Snake framework is currently being used for supporting a challenge colocated with APVP 2023 (the French workshop on the protection of privacy).

Mots clés: challenge; anonymization; sanitization; attack; membership inference attack; synthetic data generation; differential privacy

Domaines: Informatique [cs]

Tristan Allard, Louis Béziaud, Sébastien Gambs. SNAKE challenge: Sanitization Algorithms under Attack. ACM International Conference on Information and Knowledge Management, Oct 2023, Birmingham, United Kingdom. ⟨10.1145/3583780.3614754⟩. ⟨hal-04228115⟩