Verified computational differential privacy with applications to smart metering

Proceedings of the Computer Security Foundations Workshop

Volumn , Issue , 2013, Pages 287-301

  Barthe, Gilles ^a   Danezis, George ^b   Gregoire, Benjamin ^c   Kunz, Cesar ^a   Zanella Beguelin, Santiago ^b  

^a IMDEA SOFTWARE INSTITUTE   (Spain)

^b INRIA   (France)

^c MICROSOFT RESEARCH   (United States)

Author keywords

aggregation; differential privacy; EasyCrypt; Hamming distance; smart meters

Indexed keywords

COMPUTATIONAL MODEL; DIFFERENTIAL PRIVACIES; DISTRIBUTED PROTOCOLS; EASYCRYPT; PROBABILISTIC COMPUTATION; PROGRAM EQUIVALENCE; SECURITY PROPERTIES; TWO-PARTY PROTOCOLS;

AGGLOMERATION; HAMMING DISTANCE; SECURITY OF DATA; SMART METERS;

SECURITY SYSTEMS;

EID: 84884999092     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2013.26     Document Type: Conference Paper

References (46)

1. M. Alaggan, S. Gambs, and A.-M. Kermarrec, "Private similarity computation in distributed systems: From cryptography to differential privacy, " in 15th International Conference on Principles of Distributed Systems, OPODIS 2011, ser. Lecture Notes in Computer Science, vol. 7109. Heidelberg: Springer, 2011, pp. 357-377.
2. G. Barthe, B. Grégoire, and S. Zanella-Béguelin, "Formal certification of code-based cryptographic proofs, " in 36th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, POPL 2009. New York: ACM, 2009, pp. 90-101.
3. G. Barthe, B. Grégoire, S. Heraud, and S. Zanella-Béguelin, "Computer-aided security proofs for the working cryptographer, " in Advances in Cryptology-CRYPTO 2011, ser. Lecture Notes in Computer Science, vol. 6841. Heidelberg: Springer, 2011, pp. 71-90.
4. G. Barthe, B. Grégoire, S. Heraud, F. Olmedo, and S. Zanella-Béguelin, "Verified indifferentiable hashing into elliptic curves, " in 1st Conference on Principles of Security and Trust-POST 2012, ser. Lecture Notes in Computer Science, vol. 7215. Heidelberg: Springer, 2012.
5. G. Barthe, B. Köpf, F. Olmedo, and S. Zanella-Béguelin, "Probabilistic relational reasoning for differential privacy, " in 39th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, POPL 2012. New York: ACM, 2012, pp. 97-110.
6. G. Barthe, C. Fournet, B. Grégoire, P.-Y. Strub, N. Swamy, and S. Zanella-Béguelin, "Probabilistic relational verification for cryptographic implementations, " Unpublished manuscript, 2013.
7. G. Barthe, B. Köepf, F. Olmedo, and S. Zanella-Béguelin, "Probabilistic relational reasoning for differential privacy, " TOPLAS, 2013.
8. A. Beimel, K. Nissim, and E. Omri, "Distributed private data analysis: Simultaneously solving how and what, " in Advances in Cryptology-CRYPTO 2008, ser. Lecture Notes in Computer Science, vol. 5157. Heidelberg: Springer, 2008, pp. 451-468.
9. D. Boneh, E.-J. Goh, and K. Nissim, "Evaluating 2-dnf formulas on ciphertexts, " in 2nd Theory of Cryptography Conference, TCC 2005, ser. Lecture Notes in Computer Science, vol. 3378. Heidelberg: Springer, 2005, pp. 325-341.
10. T.-H. H. Chan, E. Shi, and D. Song, "Privacy-preserving stream aggregation with fault tolerance, " in 16th International Conference on Financial Cryptography and Data Security, FC 2012, ser. Lecture Notes in Computer Science, vol. 7397. Heidelberg: Springer, 2012, pp. 200-214.
11. S. Chaudhuri, S. Gulwani, R. Lublinerman, and S. Navidpour, "Proving programs robust, " in 19th ACM SIGSOFT Symposium on the Foundations of Software Engineering and 13rd European Software Engineering Conference, ESEC/FSE 2011. New York: ACM, 2011, pp. 102-112.
12. M. R. Clarkson and F. B. Schneider, "Hyperproperties, " Journal of Computer Security, vol. 18, no. 6, pp. 1157-1210, 2010.
13. G. Danezis, M. Kohlweiss, and A. Rial, "Differentially private billing with rebates, " in 13th International Conference on Information Hiding, IH 2011, ser. Lecture Notes in Computer Science, vol. 6958. Heidelberg: Springer, 2011, pp. 148-162.
14. P. L. D'Antoni, E. J. G. Arias, A. Haeberlen, and B. C. Pierce, "Type-based sensitivity analysis, " Unpublished manuscript, 2013.
15. Y. Deng and W. Du, "Logical, metric, and algorithmic characterisations of probabilistic bisimulation, " Carnegie Mellon University, Tech. Rep. CMU-CS-11-110, March 2011.
16. Y. Dodis, A. López-Alt, I. Mironov, and S. P. Vadhan, "Differential privacy with imperfect randomness, " in Advances in Cryptology-CRYPTO 2012, ser. Lecture Notes in Computer Science, vol. 7417. Heidelberg: Springer, 2012, pp. 497-516.
17. C. Dwork, "Differential privacy, " in 33rd International Colloquium on Automata, Languages and Programming, ICALP 2006, ser. Lecture Notes in Computer Science, vol. 4052. Heidelberg: Springer, 2006, pp. 1-12.
18. C. Dwork and K. Nissim, "Privacy-preserving datamining on vertically partitioned databases, " in Advances in Cryptology-CRYPTO 2004, ser. Lecture Notes in Computer Science, vol. 3152. Heidelberg: Springer, 2004, pp. 528-544.
19. M. Gaboardi, A. Haeberlen, J. Hsu, A. Narayan, and B. C. Pierce, "Linear dependent types for differential privacy, " in 40th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, POPL 2013. New York: ACM, 2013, pp. 357-370.
20. F. D. Garcia and B. Jacobs, "Privacy-friendly energymetering via homomorphic encryption, " in 6th International Workshop on Security and Trust Management, STM 2010, ser. Lecture Notes in Computer Science, vol. 6710. Heidelberg: Springer, 2010, pp. 226-238.
21. A. Ghosh, T. Roughgarden, and M. Sundararajan, "Universally utility-maximizing privacy mechanisms, " SIAM J. Comput., vol. 41, no. 6, pp. 1673-1693, 2012.
22. B. Goethals, S. Laur, H. Lipmaa, and T. Mielikäinen, "On private scalar product computation for privacypreserving data mining, " in 7th International Conference on Information Security and Cryptology-ICISC 2004, ser. Lecture Notes in Computer Science, vol. 3506. Heidelberg: Springer, 2005, pp. 104-120.
23. S. Goldwasser and M. Sipser, "Private coins versus public coins in interactive proof systems, " in 18th Annual ACM Symposium on Theory of Computing, STOC 1986. New Yotk: ACM, 1986, pp. 59-68.
24. A. Groce, J. Katz, and A. Yerukhimovich, "Limits of computational differential privacy in the client/server setting, " in 8th Theory of Cryptography Conference, TCC 2011, ser. Lecture Notes in Computer Science, vol. 6597. Heidelberg: Springer, 2011, pp. 417-431.
25. A. Gupta, K. Ligett, F. McSherry, A. Roth, and K. Talwar, "Differentially private combinatorial optimization, " in 21st Annual ACM-SIAM Symposium on Discrete Algorithms, SODA 2010. SIAM, 2010, pp. 1106-1125.
26. J. Hurd, "An LCF-style interface between HOL and first-order logic, " in 18th International Conference on Automated Deduction, CADE-18, ser. Lecture Notes in Artificial Intelligence, vol. 2392. Heidelberg: Springer, 2002, pp. 134-138.
27. M. Jawurek, M. Johns, and F. Kerschbaum, "Plug-in privacy for smart metering billing, " in 11h International Symposium on Privacy Enhancing Technologies, PETS 2011, ser. Lecture Notes in Computer Science, vol. 6794. Heidelberg: Springer, 2011, pp. 192-210.
28. M. Jawurek and F. Kerschbaum, "Fault-tolerant privacypreserving statistics, " in 12th International Symposium on Privacy Enhancing Technologies, PETS 2012, ser. Lecture Notes in Computer Science, vol. 7384. Heidelberg: Springer, 2012, pp. 221-238.
29. K. Kursawe, "Some ideas on privacy preserving meter aggregation, " Radboud Universiteit Nijmegen, Tech. Rep. ICIS-R11002, January 2011.
30. K. Kursawe, G. Danezis, and M. Kohlweiss, "Privacyfriendly aggregation for the smart-grid, " in 11h International Symposium on Privacy Enhancing Technologies, PETS 2011, ser. Lecture Notes in Computer Science, vol. 6794. Heidelberg: Springer, 2011, pp. 175-191.
31. A. McGregor, I. Mironov, T. Pitassi, O. Reingold, K. Talwar, and S. P. Vadhan, "The limits of two-party differential privacy, " Electronic Colloquium on Computational Complexity (ECCC), vol. 18, p. 106, 2011.
32. F. D. McSherry, "Privacy integrated queries: an extensible platform for privacy-preserving data analysis, " in 35th SIGMOD International Conference on Management of Data, SIGMOD 2009. New York: ACM, 2009, pp. 19-30.
33. J. Meng and L. C. Paulson, "Translating higher-order clauses to first-order clauses, " J. Autom. Reasoning, vol. 40, no. 1, pp. 35-60, 2008.
34. I. Mironov, O. Pandey, O. Reingold, and S. Vadhan, "Computational differential privacy, " in Advances in Cryptology-CRYPTO 2009, ser. Lecture Notes in Computer Science, vol. 5677. Heidelberg: Springer, 2009, pp. 126-142.
35. A. Molina-Markham, G. Danezis, K. Fu, P. Shenoy, and D. Irwin, "Designing privacy-preserving smart meters with low-cost microcontrollers, " in 16th International Conference on Financial Cryptography and Data Security, FC 2012, ser. Lecture Notes in Computer Science, vol. 7397. Heidelberg: Springer, 2012, pp. 239-253.
36. A. Nanevski, A. Banerjee, and D. Garg, "Verification of information flow and access control policies with dependent types, " in 32nd IEEE Symposium on Security and Privacy, S&P 2011. IEEE Computer Society, 2011, pp. 165-179.
37. P. Paillier, "Public-key cryptosystems based on composite degree residuosity classes, " in Advances in Cryptology-EUROCRYPT 1999, ser. Lecture Notes in Computer Science, vol. 1592. Heidelberg: Springer, 1999, pp. 223-238.
38. B. C. Pierce, "Differential privacy in the programming languages community, " 2012, invited tutorial at DIMACS Workshop on Recent Work on Differential Privacy across Computer Science.
39. J. Reed and B. C. Pierce, "Distance makes the types grow stronger: a calculus for differential privacy, " in 15th ACM SIGPLAN International Conference on Functional programming, ICFP 2010. New York: ACM, 2010, pp. 157-168.
40. A. Rial and G. Danezis, "Privacy-preserving smart metering, " in 10th Annual ACM Workshop on Privacy in the Electronic Society, WPES 2011. New York: ACM, 2011, pp. 49-60.
41. I. Roy, S. T. V. Setty, A. Kilzer, V. Shmatikov, and E. Witchel, "Airavat: security and privacy for MapReduce, " in 7th USENIX Conference on Networked Systems Design and Implementation, NSDI 2010. Berkeley: USENIX Association, 2010, pp. 297-312.
42. E. Shi, T.-H. H. Chan, E. G. Rieffel, R. Chow, and D. Song, "Privacy-preserving aggregation of time-series data, " in 18th Annual Network and Distributed System Security Symposium, NDSS 2011. The Internet Society, 2011.
43. V. Shoup, "Using hash functions as a hedge against chosen ciphertext attack, " in Advances in Cryptology-EUROCRYPT 2000, ser. Lecture Notes in Computer Science, vol. 1807. Heidelberg: Springer, 2000, pp. 275-288.
44. T. Terauchi and A. Aiken, "Secure information flow as a safety problem, " in 12th International Symposium on Static Analysis, SAS 2005, ser. Lecture Notes in Computer Science, vol. 3672. Heidelberg: Springer, 2005, pp. 352-367.
45. M. C. Tschantz, D. Kaynar, and A. Datta, "Formal verification of differential privacy for interactive systems, " Electronic Notes in Theoretical Computer Science, vol. 276, pp. 61-79, 2011.
46. J. Vaidya and C. Clifton, "Privacy preserving association rule mining in vertically partitioned data, " in 8th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD 2002. New York: ACM, 2002, pp. 639-644.