TY - JOUR
T1 - Mosaic Privacy-Preserving Mechanisms for Healthcare Analytics
AU - Krall, Alexander
AU - Finke, Daniel
AU - Yang, Hui
N1 - Funding Information:
Manuscript received May 23, 2020; revised August 25, 2020 and October 2, 2020; accepted November 3, 2020. Date of publication November 6, 2020; date of current version June 4, 2021. This work was supported by NSF Center for Healthcare Organization Transformation (CHOT), through the NSF IUCRC award #1624727. (Corresponding author: Hui Yang.) Alexander Krall is with the the Complex Systems Monitoring, Modeling and Control lab, The Pennsylvania State University, University Park,, PA 16802 USA (e-mail: auk999@psu.edu).
Publisher Copyright:
© 2013 IEEE.
PY - 2021/6
Y1 - 2021/6
N2 - The Internet of Things (IoT) has propelled the evolution of medical sensing technologies to greater heights. Thus, traditional health systems have been transformed into new data-rich environments. This provides an unprecedented opportunity to develop new analytical methods and tools towards a new paradigm of smart and interconnected health systems. Nevertheless, there are risks pertinent to increasing levels of system connectivity and data accessibility. Cyber-attacks become more prevalent and complex, leading to greater likelihood of data breaches. These events bring sudden disruptions to routine operations and cause the loss of billions of dollars. Adversaries often attempt to leverage models to learn a target's sensitive attributes or extrapolate its inclusion within a database. As healthcare systems are critical to improving the wellbeing of our society, there is an urgent need to protect the privacy of patients and minimize the risk of model inversion attacks. This paper presents a new approach, named Mosaic Gradient Perturbation (MGP), to preserve privacy in the framework of predictive modeling, which meets the requirement of differential privacy while mitigating the risk of model inversion. MGP is flexible in fine-tuning the trade-offs between model performance and attack accuracy while being highly scalable for large-scale computing. Experimental results show that the proposed MGP method improves upon traditional gradient perturbation to mitigate the risk of model inversion while offering greater preservation of model accuracy. The MGP technique shows strong potential to circumvent paramount costs due to privacy breaches while maintaining the quality of existing decision-support systems, thereby ushering in a privacy-preserving smart health system.
AB - The Internet of Things (IoT) has propelled the evolution of medical sensing technologies to greater heights. Thus, traditional health systems have been transformed into new data-rich environments. This provides an unprecedented opportunity to develop new analytical methods and tools towards a new paradigm of smart and interconnected health systems. Nevertheless, there are risks pertinent to increasing levels of system connectivity and data accessibility. Cyber-attacks become more prevalent and complex, leading to greater likelihood of data breaches. These events bring sudden disruptions to routine operations and cause the loss of billions of dollars. Adversaries often attempt to leverage models to learn a target's sensitive attributes or extrapolate its inclusion within a database. As healthcare systems are critical to improving the wellbeing of our society, there is an urgent need to protect the privacy of patients and minimize the risk of model inversion attacks. This paper presents a new approach, named Mosaic Gradient Perturbation (MGP), to preserve privacy in the framework of predictive modeling, which meets the requirement of differential privacy while mitigating the risk of model inversion. MGP is flexible in fine-tuning the trade-offs between model performance and attack accuracy while being highly scalable for large-scale computing. Experimental results show that the proposed MGP method improves upon traditional gradient perturbation to mitigate the risk of model inversion while offering greater preservation of model accuracy. The MGP technique shows strong potential to circumvent paramount costs due to privacy breaches while maintaining the quality of existing decision-support systems, thereby ushering in a privacy-preserving smart health system.
UR - http://www.scopus.com/inward/record.url?scp=85098766635&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85098766635&partnerID=8YFLogxK
U2 - 10.1109/JBHI.2020.3036422
DO - 10.1109/JBHI.2020.3036422
M3 - Article
C2 - 33156796
AN - SCOPUS:85098766635
SN - 2168-2194
VL - 25
SP - 2184
EP - 2192
JO - IEEE Journal of Biomedical and Health Informatics
JF - IEEE Journal of Biomedical and Health Informatics
IS - 6
M1 - 9250511
ER -