A Programming Language for Data Privacy with Accuracy Estimations
A Programming Language for Data Privacy with Accuracy Estimations
复制标题
具有准确性估计的数据隐私编程语言
DOI：
10.1145/3452096
复制
发表时间：
2021
影响因子：
1.3
通讯作者：
Gaboardi, Marco
中科院分区：
文献类型：
--
作者：
Lobo-Vesga, Elisabet;Russo, Alejandro;Gaboardi, Marco
差分隐私为私有数据计算的隐私性和准确性提供了一个正式的推理框架。它还为构建私有数据分析提供了一组丰富的构建块。经过仔细校准，这些分析同时保证了提供数据的个人的隐私，以及数据分析结果的准确性，从而推断出有关人口的有用属性。差分隐私的组合特性促使了一些编程语言的设计和实现，以简化差分隐私分析的实现。尽管这些编程语言提供了对隐私推理的支持，但它们中的大多数都忽略了对数据分析准确性的推理。为了克服这一限制，我们提出了della，这是一个编程框架，为数据分析师提供关于隐私、准确性及其权衡的推理支持。della的显著特点是一个新颖的组件，静态跟踪不同的数据分析的准确性。为了提供严格的精度估计，该组件利用污染分析来自动推断添加的不同噪声量的统计独立性，以保证隐私。我们通过实现文献中的几个经典查询来评估我们的方法，并展示数据分析师如何校准隐私参数以满足准确性要求，反之亦然。
Differential privacy offers a formal framework for reasoning about the privacy and accuracy of computations on private data. It also offers a rich set of building blocks for constructing private data analyses. When carefully calibrated, these analyses simultaneously guarantee the privacy of the individuals contributing their data, and the accuracy of the data analysis results, inferring useful properties about the population. The compositional nature of differential privacy has motivated the design and implementation of several programming languages to ease the implementation of differentially private analyses. Even though these programming languages provide support for reasoning about privacy, most of them disregard reasoning about the accuracy of data analyses. To overcome this limitation, we present DPella, a programming framework providing data analysts with support for reasoning about privacy, accuracy, and their trade-offs. The distinguishing feature of DPella is a novel component that statically tracks the accuracy of different data analyses. To provide tight accuracy estimations, this component leverages taint analysis for automatically inferringstatistical independenceof the different noise quantities added for guaranteeing privacy. We evaluate our approach by implementing several classical queries from the literature and showing how data analysts can calibrate the privacy parameters to meet the accuracy requirements, and vice versa.
登录
查看更多内容
羽量级 PINQ
影响因子：
--
作者：
H. Ebadi;David Sands
通讯作者：
David Sands
安全信息流的箭头
影响因子：
1.1
作者：
Peng Li;Steve Zdancewic
通讯作者：
Steve Zdancewic
影响因子：
--
作者：
G. Barthe;Rohit Chadha;Paul Krogmeier;A. Sistla;Mahesh Viswanathan
通讯作者：
G. Barthe;Rohit Chadha;Paul Krogmeier;A. Sistla;Mahesh Viswanathan
Fuzzi：差分隐私的三级逻辑
影响因子：
--
作者：
Hengchu Zhang;Edo Roth;Andreas Haeberlen;B. Pierce;Aaron Roth
通讯作者：
Aaron Roth
DOI：
10.1145/3188745.3188946
发表时间：
2018-06
期刊：
Proceedings of the 50th Annual ACM SIGACT Symposium on Theory of Computing
影响因子：
--
作者：
Mark Bun;C. Dwork;G. Rothblum;T. Steinke
通讯作者：
Mark Bun;C. Dwork;G. Rothblum;T. Steinke