计算机工程与设计2024,Vol.45Issue(12) :3546-3552.DOI:10.16208/j.issn1000-7024.2024.12.004

PrivCode:代码生成隐私保护策略

PrivCode:Privacy protection protocol for code generation

杨琴 石林 徐守坤 张华君
计算机工程与设计2024,Vol.45Issue(12) :3546-3552.DOI:10.16208/j.issn1000-7024.2024.12.004

PrivCode:代码生成隐私保护策略

PrivCode:Privacy protection protocol for code generation

杨琴 1石林 1徐守坤 1张华君1
扫码查看

作者信息

  • 1. 常州大学计算机与人工智能学院,江苏常州 213164
  • 折叠

摘要

为解决用户使用Copilot等代码生成工具时面临的数据隐私泄露的问题,提出一种在线代码生成隐私保护策略PrivCode.考虑到当前机器学习隐私保护策略往往是基于白盒的前提设计的,难以适用不可知结构下的大型模型,将Copi-lot视为黑盒并引入代理服务器,通过Mix-Net混淆多个用户的请求,打破用户和代码生成请求之间的映射关系.1-out-of-N不经意传输确保用户接收代码提示的安全.该策略满足定义的3条性质,实验测算结果表明,协议在实际场景中可用.该策略兼顾了用户的安全以及使用需求.

Abstract

To address the issue of data privacy leakage that users may encounter when using code generation tools like Copilot,a privacy protection strategy for online code generation called PrivCode was proposed.Considering that current machine learning privacy protection strategies are often designed on the premise of a white-box model,which is difficult to apply to large models with unknown structures,Copilot was treated as a black-box and a proxy server was introduced using this strategy.Requests from multiple users were mixed by using Mix-Net,thereby breaking the mapping relationship between users and code generation requests.Secure delivery of code suggestions to users was ensured through the 1-out-of-N oblivious transfer.Three defined properties are satisfied and its practicality in real-world scenarios is indicated by experimental results.This strategy keeps a balance between user security and usage requirements.

关键词

隐私保护/代码生成/混淆网络/数据安全/不经意传输/双线性映射/匿名

Key words

privacy protection/code generation/Mix-Net/data security/oblivious transfer/bilinear mapping/anonymous

引用本文复制引用

出版年

2024
计算机工程与设计
中国航天科工集团二院706所

计算机工程与设计

CSTPCD北大核心
影响因子:0.617
ISSN:1000-7024
段落导航相关论文