# Obfuscation via Information Density Estimation

arXiv: https://arxiv.org/abs/1910.08109 · HTML: https://mlsanity.com/paper/1910.08109/

## Key facts

- Cited by 5 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 17 Oct 2019.

## Built on by (most cited first, 5 of 5)

- [Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information](https://mlsanity.com/paper/2305.04146/) (2023)
- [Variational Leakage: The Role of Information Complexity in Privacy Leakage](https://mlsanity.com/paper/2106.02818/) (2021)
- [Uncertainty-Autoencoder-Based Privacy and Utility Preserving Data Type Conscious Transformation](https://mlsanity.com/paper/2205.01950/) (2022)
- [MaSS: Multi-attribute Selective Suppression for Utility-preserving Data Transformation from an Information-theoretic Perspective](https://mlsanity.com/paper/2405.14981/) (2024)
- [Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition](https://mlsanity.com/paper/2404.02696/) (2024)

## Abstract (arXiv)

Identifying features that leak information about sensitive attributes is a key challenge in the design of information obfuscation mechanisms. In this paper, we propose a framework to identify information-leaking features via information density estimation. Here, features whose information densities exceed a pre-defined threshold are deemed information-leaking features. Once these features are identified, we sequentially pass them through a targeted obfuscation mechanism with a provable leakage guarantee in terms of mathsfEγ-divergence. The core of this mechanism relies on a data-driven estimate of the trimmed information density for which we propose a novel estimator, named the trimmed information density estimator (TIDE). We then use TIDE to implement our mechanism on three real-world datasets. Our approach can be used as a data-driven pipeline for designing obfuscation mechanisms targeting specific features.