Sort:
Open Access Research Article Issue
Efficient Privacy-Preserving Streaming Histogram Publication via Sampling-Based Shuffled Method
Tsinghua Science and Technology 2026, 31(3): 1722-1736
Published: 19 December 2025
Abstract PDF (2.4 MB) Collect
Downloads:53

The rapid growth of web technologies and the industrial Internet has resulted in massive data streams that are essential for real time decision-making applications. A critical challenge lies in dynamically publishing histograms for the most recent w elements within sliding windows while ensuring individual privacy protection. Although Shuffle Differential Privacy (SDP) provides strong privacy guarantees, existing methods for SDP histograms face huge time and space overhead, as they require caching all sliding window elements. This limitation hinders their practicality in large-scale, real time settings. To overcome these limitations, this paper proposes Sampling-based Shuffle Differential Privacy (SSDP), an efficient algorithm for the publication of privacy-preserving histogram. Central to SSDP is the Online Sampling Sketch Structure (OSSS), which dynamically captures essential data patterns from streaming windows through adaptive sampling, enabling approximate histogram generation with dramatically reduced time and space complexities. To counter advanced privacy threats, SSDP integrates targeted noise injection and a hash-optimized Generalized Randomized Response (GRR) mechanism, providing robust defenses against shuffling and publisher collusion attacks. Moreover, a correlated unbiased estimation mechanism enhances both privacy preservation and data utility. Extensive experiments on real-world datasets demonstrate the superiority of SSDP, achieving up to 40% reduction in processing time compared to state-of-the-art methods, with minimal loss in utility.

Open Access Research Article Online First
A Block-Wise Updating Strategy for Approximate Duplicate Detection
Tsinghua Science and Technology
Published: 26 September 2025
Abstract PDF (3.6 MB) Collect
Downloads:51

Approximate duplicate detection in data streams aims to determine whether an item is present within a small subsequence of the data stream. It is a fundamental query problem needed in several network applications, such as web crawling and Radio Frequency Identification (RFID) tag management. Most of the existing algorithms are not space-efficient as they overlook the distributional information of query frequency and membership likelihood. In this paper, we propose CEll Bloom Filter (CEBF) algorithm, a space-efficient data structure designed by adopting a block-wise updating strategy, to solve this problem, and two typical distributions are considered: two typical distributions: (1) uniform query frequency of items, and (2) uniform membership likelihood of items. For an arbitrary sliding window size n and an arbitrary average false positive rate ε(0,1), the proposed algorithm needs approximately O(nlog2(1/ε)) bits, which is significantly less than the number of bits used in existing methods. Space lower bound is also derived for these two typical distributions, which demonstrates that the proposed algorithm is near-optimal in terms of space consumption. Experiments are conducted on both synthetic and real datasets, and the experimental results clearly demonstrate that the proposed method is clearly and significantly more effective and promising compared to existing other methods.

Open Access Issue
Adversarial Attack on Object Detection via Object Feature-Wise Attention and Perturbation Extraction
Tsinghua Science and Technology 2025, 30(3): 1174-1189
Published: 30 December 2024
Abstract PDF (9 MB) Collect
Downloads:442

Deep neural networks are commonly used in computer vision tasks, but they are vulnerable to adversarial samples, resulting in poor recognition accuracy. Although traditional algorithms that craft adversarial samples have been effective in attacking classification models, the attacking performance degrades when facing object detection models with more complex structures. To address this issue better, in this paper we first analyze the mechanism of multi-scale feature extraction of object detection models, and then by constructing the object feature-wise attention module and the perturbation extraction module, a novel adversarial sample generation algorithm for attacking detection models is proposed. Specifically, in the first module, based on the multi-scale feature map, we reduce the range of perturbation and improve the stealthiness of adversarial samples by computing the noise distribution in the object region. Then in the second module, we feed the noise distribution into the generative adversarial networks to generate adversarial perturbation with strong attack transferability. By doing so, the proposed approach possesses the ability to better confuse the judgment of detection models. Experiments carried out on the DroneVehicle dataset show that our method is computationally efficient and works well in attacking detection models measured by qualitative analysis and quantitative analysis.

Open Access Issue
Streaming Histogram Publication over Weighted Sliding Windows Under Differential Privacy
Tsinghua Science and Technology 2024, 29(6): 1674-1693
Published: 20 June 2024
Abstract PDF (6.6 MB) Collect
Downloads:163

Continuously publishing histograms in data streams is crucial to many real-time applications, as it provides not only critical statistical information, but also reduces privacy leaking risk. As the importance of elements usually decreases over time in data streams, in this paper we model a data stream by a sequence of weighted sliding windows, and then study how to publish histograms over these windows continuously. The existing literature can hardly solve this problem in a real-time way, because they need to buffer all elements in each sliding window, resulting in high computational overhead and prohibitive storage burden. In this paper, we overcome this drawback by proposing an online algorithm denoted by Efficient Streaming Histogram Publishing (ESHP) to continuously publish histograms over weighted sliding windows. Specifically, our method first creates a novel sketching structure, called Approximate-Estimate Sketch (AESketch), to maintain the counting information of each histogram interval at every time instance; then, it creates histograms that satisfy the differential privacy requirement by smartly adding appropriate noise values into the sketching structure. Extensive experimental results and rigorous theoretical analysis demonstrate that the ESHP method can offer equivalent data utility with significantly lower computational overhead and storage costs when compared to other existing methods.

Open Access Issue
Joint Sample Position-Based Noise Filtering and Mean Shift Clustering for Imbalanced Classification Learning
Tsinghua Science and Technology 2024, 29(1): 216-231
Published: 21 August 2023
Abstract PDF (7.5 MB) Collect
Downloads:91

The problem of imbalanced data classification learning has received much attention. Conventional classification algorithms are susceptible to data skew to favor majority samples and ignore minority samples. Majority weighted minority oversampling technique (MWMOTE) is an effective approach to solve this problem, however, it may suffer from the shortcomings of inadequate noise filtering and synthesizing the same samples as the original minority data. To this end, we propose an improved MWMOTE method named joint sample position based noise filtering and mean shift clustering (SPMSC) to solve these problems. Firstly, in order to effectively eliminate the effect of noisy samples, SPMSC uses a new noise filtering mechanism to determine whether a minority sample is noisy or not based on its position and distribution relative to the majority sample. Note that MWMOTE may generate duplicate samples, we then employ the mean shift algorithm to cluster minority samples to reduce synthetic replicate samples. Finally, data cleaning is performed on the processed data to further eliminate class overlap. Experiments on extensive benchmark datasets demonstrate the effectiveness of SPMSC compared with other sampling methods.

Total 5