Adaptively Robust Resettable Streaming
Edith Cohen, Elena Gribelyuk, Jelani Nelson, Uri Stemmer
TL;DR
The paper tackles adaptively robust streaming in the resettable model, where updates can increment or reset, and adversaries may adapt based on past outputs. It introduces dedicated robust sketches that achieve prefix-max accuracy with polylogarithmic space in the stream length, for cardinality, sum, and Bernstein statistics, by integrating differential privacy (DP) with the Binary Tree Mechanism for continual observation. The authors show that prior wrappers and linear/union-composable sketches are insufficient under adaptivity, and they provide both fixed-rate and adjustable-rate robust designs that maintain accuracy despite adaptive inputs. They further extend robustness to Bernstein statistics through a reduction that combines robust sum and cardinality sketches with independent randomness in the output mappings, yielding a unified framework for a broad class of sublinear statistics. This work enables reliable active-resource monitoring and machine unlearning in adversarial streaming settings, offering polylog-space solutions with formal prefix-max guarantees and outlining directions for future improvement on super-linear statistics and broader ReLU models.
Abstract
We study algorithms in the resettable streaming model, where the value of each key can either be increased or reset to zero. The model is suitable for applications such as active resource monitoring with support for deletions and machine unlearning. We show that all existing sketches for this model are vulnerable to adaptive adversarial attacks that apply even when the sketch size is polynomial in the length of the stream. To overcome these vulnerabilities, we present the first adaptively robust sketches for resettable streams that maintain polylogarithmic space complexity in the stream length. Our framework supports (sub) linear statistics including $L_p$ moments for $p\in[0,1]$ (in particular, Cardinality and Sum) and Bernstein statistics. We bypass strong impossibility results known for linear and composable sketches by designing dedicated streaming sketches robustified via Differential Privacy. Unlike standard robustification techniques, which provide limited benefits in this setting and still require polynomial space in the stream length, we leverage the Binary Tree Mechanism for continual observation to protect the sketch's internal randomness. This enables accurate prefix-max error guarantees with polylogarithmic space.
