Formal verification of differential privacy for interactive systems (extended abstract)

Electronic Notes in Theoretical Computer Science

Volumn 276, Issue 1, 2011, Pages 61-79

  Tschantz, Michael Carl ^a   Kaynar, Dilsun ^a   Datta, Anupam ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Bisimulation; Differential Privacy; Formal Methods; Privacy; Verification

Indexed keywords

BISIMULATIONS; BOUNDED MEMORIES; DIFFERENTIAL PRIVACIES; DIFFERENTIAL PRIVACY; EXTENDED ABSTRACTS; FORMAL VERIFICATIONS; INTERACTIVE SYSTEM; PRIVACY PRESERVING; PROBABILISTIC AUTOMATA; PROBABILISTIC BISIMULATIONS; SOUND VERIFICATION;

DATA REDUCTION; USER INTERFACES;

FORMAL METHODS;

EID: 80054887187     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2011.09.015     Document Type: Conference Paper

References (45)

1. M.E. Andres, C. Palamidessi, P. van Rossum, and G. Smith Computing the leakage of information-hiding systems Proceedings of Sixteenth International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS) LNCS vol. 6015 2010 373 389
2. M. Backes, and B. Pfitzmann Computational probabilistic non-interference ESORICS 02: Proceedings of the 7th European Symposium on Research in Computer Security 2002 1 23
3. Backes, M., B. Pfitzmann and M. Waidner, The reactive simulatability framework for asynchronous systems, Information and Computation (2007), preprint on IACR ePrint 2004/082.
4. C. Baier, B. Engelen, and M. Majster-Cederbaum Deciding bisimilarity and similarity for probabilistic processes Journal of Computer and System Sciences 60 2000 187 231 (Pubitemid 30568401)
5. C. Baier, H. Hermanns, and J.-P. Katoen Probabilistic weak simulation is decidable in polynomial time Information Processing Letters 89 2004 123 152
6. Blum, A., K. Ligett and A. Roth, A learning theory approach to non-interactive database privacy, in: STOC 08: Proceedings of the 40th annual ACM symposium on Theory of computing (2008), pp. 609-618.
7. Bossi, A., R. Focardi, C. Piazza and S. Rossi, Bisimulation and unwinding for verifying possibilistic security properties, in: VMCAI 2003: Proceedings of the 4th International Conference on Verification, Model Checking, and Abstract Interpretation (2003), pp. 223-237.
8. R. Canetti, L. Cheung, D. Kaynar, M. Liskov, N. Lynch, O. Pereira, and R. Segala Time-bounded task-pioas: A framework for analyzing security protocols Journal of Discrete Event Dynamic Systems 18 2008 111 159 short version appeared In 20th Symposium on Distributed Computing (DISC), 2006
9. S. Cattani, and R. Segala Decision algorithms for probabilistic bisimulation L. Brim, P. Jancar, M. Kretínský, A. Kucera, CONCUR 02: Proceedings of the 13th International Conference on Concurrency Theory LNCS vol. 2421 2002 371 385 URL citeseer.ist.psu.edu/cattani02decision.html
10. Chen, H. and P. Malacaria, Quantitative analysis of leakage for multi-threaded programs, in: PLAS 07: Proceedings of the 2007 workshop on Programming languages and analysis for security (2007), pp. 31-40. (Pubitemid 350164744)
11. D. Clark, S. Hunt, and P. Malacaria A static analysis for quantifying information flow in a simple imperative language Journal of Computer Security 15 2007 321 371 (Pubitemid 46868450)
12. Clarkson, M. R., A. C. Myers and F. B. Schneider, Belief in information flow, in: CSFW 05: Proceedings of the 18th IEEE workshop on Computer Security Foundations (2005), pp. 31-45. (Pubitemid 41696419)
13. Dwork, C., Differential privacy, in: 33rd International Colloquium on Automata, Languages and Programming (ICALP 2006), 2006, pp. 1-12, part 2. (Pubitemid 44113232)
14. Dwork, C., Differential privacy: a survey of results, in: Proceedings of the 5th international conference on Theory and applications of models of computation, TAMC'08 (2008), pp. 1-19.
15. C. Dwork The differential privacy frontier (extended abstract) 6th Theory of Cryptography Conference Lecture Notes in Computer Science vol. 5444 2009 496 502
16. Dwork, C., Differential privacy in new settings, in: Proceedings of Symposium on Discrete Algorithms (SODA) (2010).
17. C. Dwork, F. Mcsherry, K. Nissim, and A. Smith Calibrating noise to sensitivity in private data analysis Theory of Cryptography Conference Lecture Notes in Computer Science vol. 3876 2006 265 284 (Pubitemid 43979853)
18. Dwork, C., M. Naor, T. Pitassi and G. N. Rothblum, Differential privacy under continual observation, in: In Proceedings of the 42nd ACM Syposium on the Theory of Computing (STOC), 2010.
19. Focardi, R. and R. Gorrieri, Classification of security properties (Part I: Information flow) (2001).
20. Ghosh, A., T. Roughgarden and M. Sundararajan, Universally utility-maximizing privacy mechanisms, in: STOC 09: Proceedings of the 41st annual ACM symposium on Theory of computing (2009), pp. 351-360.
21. Goguen, J. A. and J. Meseguer, Security policies and security models, in: IEEE Symposium on Security and Privacy (1982), p. 11.
22. Goguen, J. A. and J. Meseguer, Unwinding and inference control, in: Proc. of IEEE Symp. on Security and Privacy (1984), pp. 75-86.
23. Gray, J. W., III, Toward a mathematical foundation for information flow security, in: IEEE Symposium on Security and Privacy, 1991, pp. 21-35.
24. J.W. Gray Toward a mathematical foundation for information Journal of Computer Security 1 1992 255 294
25. N. Lynch, R. Segala, and F. Vaandrager Observing branching structure through probabilistic contexts SIAM Journal on Computing 37 2007 977 1013
26. N. Lynch, and F. Vaandrager Forward and backward simulations Part I: Untimed systems Inf. Comput. 121 1995 214 233
27. Malacaria, P., Assessing security threats of looping constructs, in: POPL 07: Proceedings of the 34th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages (2007), pp. 225-235.
28. McCamant, S. and M. D. Ernst, A simulation-based proof technique for dynamic information flow, in: PLAS 07: Proceedings of the 2007 workshop on Programming languages and analysis for security (2007), pp. 41-46. (Pubitemid 350164745)
29. McSherry, F., Privacy integrated queries: An extensible platform for privacy-preserving data analysis, in: SIGMOD 09: Proceedings of the 2009 ACM SIGMOD international conference on Management of data (2009).
30. McSherry, F. and K. Talwar, Mechanism design via differential privacy, in: FOCS 07: Proceedings of the 48th Annual IEEE Symposium on Foundations of Computer Science (2007), pp. 94-103.
31. R. Milner Communication and Concurrency 1989 Prentice Hall
32. Mironov, I., O. Pandey, O. Reingold and S. Vadhan, Computational differential privacy, in: Advances in Cryptology - CRYPTO 2009, 2009.
33. Newsome, J. and D. Song, Influence: A quantitative approach for data integrity, Technical Report CMU-CyLab-08-005, CyLab, Carnegie Mellon University (2008).
34. Nissim, K., S. Raskhodnikova and A. Smith, Smooth sensitivity and sampling in private data analysis, in: STOC 07: Proceedings of the thirty-ninth annual ACM symposium on Theory of computing (2007), pp. 75-84. (Pubitemid 47630723)
35. A. Philippou, I. Lee, and O. Sokolsky Weak bisimulation for probabilistic systems CONCUR 00: Proceedings of the 11th International Conference on Concurrency Theory Lecture Notes in Computer Science vol. 1877 2000 334 349
36. A.D. Pierro, C. Hankin, and H. Wiklicky Approximate non-interference J. Comput. Secur. 12 2004 37 81
37. Reed, J., A. J. Aviv, D. Wagner, A. Haeberlen, B. C. Pierce and J. M. Smith, Differential privacy for collaborative security, in: European Workshop on System Security (EUROSEC), 2010.
38. Reed, J. and B. C. Pierce, Distance makes the types grow stronger: A calculus for differential privacy, in: ACM SIGPLAN International Conference on Functional Programming (ICFP), 2010.
39. Roy, I., H. E. Ramadan, S. T. Setty, A. Kilzer, V. Shmatikov and E. Witchel, Airavat: Security and privacy for MapReduce, in: Proceedings of the 7th Usenix Symposium on Networked Systems Design and Implementation (NSDI), 2010.
40. Sabelfeld, A. and D. Sands, Probabilistic non-interefence for multi-threaded programs, in: Proceedings of the 13th IEEE Computer Security Foundations Workshop (July 2000).
41. R. Segala, and N. Lynch Probabilistic simulations for probabilistic processes Nordic Journal of Computing 2 1995
42. Segala, R. and A. Turrini, Approximated computationally bounded simulation relations for probabilistic automata, in: Proceedings of the 20th IEEE Computer Security Foundations Symposium, Venice, Italy, 2007, pp. 140-156.
43. Smith, G., Probabilistic noninterference through weak probabilistic bisimulation, in: Proceedings of the 16th IEEE Computer Security Foundations Workshop, Pacific Grove, California, 2003, pp. 3-13.
44. M.C. Tschantz, A. Datta, and D. Kaynar Differential privacy for probabilistic systems Technical Report CMU-CyLab-09-008, CyLab, Carnegie Mellon University http://www.cylab.cmu.edu/files/pdfs/tech-reports/CMUCylab09008.pdf 2009
45. M.C. Tschantz, D. Kaynar, and A. Datta Formal verification of differential privacy for interactive systems CoRR abs/1101.2819 http://arxiv.org/abs/1101.2819 2011