Towards statistical queries over distributed private user data

Proceedings of NSDI 2012: 9th USENIX Symposium on Networked Systems Design and Implementation

Volumn , Issue , 2012, Pages 169-182

  Chen, Ruichuan ^a   Reznichenko, Alexey ^a   Francis, Paul ^a   Gehrke, Johannes ^b  

^a MAX PLANCK INSTITUTE FOR SOFTWARE SYSTEMS   (Germany)

^b Department of Obstetrics Gynecology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

PERSONAL COMPUTERS; SYSTEMS ANALYSIS;

DETAILED DESIGN; DIFFERENTIAL PRIVACIES; STATISTICAL QUERIES; TIGHT BOUND; USER DATA;

DATA PRIVACY;

EID: 84910659277     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (52)

1. A Face Is Exposed for AOL Searcher No. 4417749. http:// www.nytimes.com/2006/08/09/technology/09aol.html.
2. FTC Charges Deceptive Privacy Practices in Google's Rollout of Its Buzz Social Network. http://www.ftc.gov/opa/2011/ 03/google.shtm.
3. Microsoft HealthVault. http://www.microsoft.com/en-us/ healthvault/.
4. Project VRM. http://cyber.law.harvard.edu/ projectvrm/Main-Page.
5. AGRAWAL, D., AND AGGARWAL, C. C. On the Design and Quantification of Privacy Preserving Data Mining Algorithms. In PODS (2001).
6. AGRAWAL, R., ANDSRIKANT, R. Privacy-Preserving Data Mining. In SIGMOD Conference (2000), pp. 439-450.
7. BACKES, M., KATE, A., MAFFEI, M., AND PECINA, K. ObliviAd: Provably Secure and Practical Online Behavioral Advertising. In IEEE Symposium on Security and Privacy (2012).
8. BAUDRON, O., FOUQUE, P.-A., POINTCHEVAL, D., STERN, J., AND POUPARD, G. Practical multi-candidate election system. In PODC (2001), pp. 274-283.
9. BLUM, A., DWORK, C., MCSHERRY, F., AND NISSIM, K. Practical privacy: the SuLQ framework. In PODS (2005), pp. 128-138.
10. BLUM, A., LIGETT, K., AND ROTH, A. A learning theory approach to non-interactive database privacy. In STOC (2008), pp. 609-618.
11. COULL, S. E., WRIGHT, C.V., MONROSE, F., COLLINS, M. P., AND REITER, M. K. Playing Devil's Advocate: Inferring Sensitive Information from Anonymized Network Traces. In NDSS (2007).
12. DOUCEUR, J. R. The Sybil Attack. In IPTPS (2002), pp. 251260.
13. DWORK, C. Differential Privacy. In ICALP (2006), pp. 1-12.
14. DWORK, C. Differential Privacy: A Survey of Results. In TAMC (2008), pp. 1-19.
15. DWORK, C. A firm foundation for private data analysis. Commun. ACM 54, 1 (2011), 86-95.
16. DWORK, C., KENTHAPADI, K., MCSHERRY, F., MIRONOV, I., AND NAOR, M. Our Data, Ourselves: Privacy Via Distributed Noise Generation. In EUROCRYPT (2006), pp. 486-503.
17. DWORK, C., MCSHERRY, F., NISSIM, K., AND SMITH, A. Calibrating Noise to Sensitivity in Private Data Analysis. In TCC (2006), pp. 265-284.
18. EIKENBERRY, S. M., AND SORENSON, J. Efficient Algorithms for Computing the Jacobi Symbol. In ANTS (1996), pp. 225-239.
19. ENCK, W., GILBERT, P., GON CHUN, B., COX, L. P., JUNG, J., MCDANIEL, P., AND SHETH, A. TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. In OSDI (2010), pp. 393-407.
20. EPPSTEIN, D., AND GOODRICH, M. T. Straggler Identification in Round-Trip Data Streams via Newton's Identities and Invert-ible Bloom Filters. IEEE Trans. Knowl. Data Eng. 23, 2 (2011), 297-306.
21. EVFIMIEVSKI, A. V., GEHRKE, J., AND SRIKANT, R. Limiting privacy breaches in privacy preserving data mining. In PODS (2003), pp. 211-222.
22. EVFIMIEVSKI, A.V., SRIKANT, R., AGRAWAL, R., AND GEHRKE, J. Privacy preserving mining of association rules. In KDD (2002), pp. 217-228.
23. FIAT, A., AND SHAMIR, A. How to Prove Yourself: Practical Solutions to Identification and Signature Problems. In CRYPTO (1986), pp. 186-194.
24. GHOSH, A., AND ROTH, A. Selling privacy at auction. In ACM Conference on Electronic Commerce (2011), pp. 199-208.
25. GOLDMAN, K., PEREZ, R., AND SAILER, R. Linking remote attestation to secure tunnel endpoints. In STC (2006), pp. 21-24.
26. GOLDREICH, O., MICALI, S., AND WIGDERSON, A. How to Play any Mental Game or A Completeness Theorem for Protocols with Honest Majority. In STOC (1987), pp. 218-229.
27. GOLDWASSER, S., AND MICALI, S. Probabilistic Encryption and How to Play Mental Poker Keeping Secret All Partial Information. In STOC (1982), pp. 365-377.
28. GOLDWASSER, S., AND MICALI, S. Probabilistic Encryption. J. Comput. Syst. Sci. 28, 2 (1984), 270-299.
29. GOODRICH, M. T., AND MITZENMACHER, M. Invertible Bloom Lookup Tables. CoRR abs/1101.2245 (2011).
30. GOTZ, M., AND NATH, S. Privacy-Aware Personalization for Mobile Advertising. In Microsoft Research Technical Report MSR-TR-2011-92 (2011).
31. GUHA, S., CHENG, B., AND FRANCIS, P. Privad: Practical Privacy in Online Advertising. In NSDI (2011).
32. HAEBERLEN, A., PIERCE, B. C., AND NARAYAN, A. Differential privacy under fire. In USENIX Security Symposium (2011).
33. KOROLOVA, A., KENTHAPADI, K., MISHRA, N., AND NTOULAS, A. Releasing search queries and clicks privately. In WWW (2009), pp. 171-180.
34. KRISHNAMURTHY, B., AND WILLS, C. E. On the leakage of personally identifiable information via online social networks. In WOSN (2009), pp. 7-12.
35. LI, N., LI, T., AND VENKATASUBRAMANIAN, S. t-Closeness: Privacy Beyond k-Anonymity and l-Diversity. In ICDE (2007), pp. 106-115.
36. MACHANAVAJJHALA, A., GEHRKE, J., KIFER, D., AND VENKITASUBRAMANIAM, M. l-Diversity: Privacy Beyond k-Anonymity. In ICDE (2006).
37. MCCUNE, J. M., PARNO, B., PERRIG, A., REITER, M. K., AND ISOZAKI, H. Flicker: an execution infrastructure for tcb minimization. In EuroSys (2008), pp. 315-328.
38. MCSHERRY, F. Privacy integrated queries: an extensible platform for privacy-preserving data analysis. In SIGMOD Conference (2009), pp. 19-30.
39. MCSHERRY, F., AND MAHAJAN, R. Differentially-private network trace analysis. In SIGCOMM (2010), pp. 123-134.
40. MCSHERRY, F., AND MIRONOV, I. Differentially Private Rec-ommender Systems: Building Privacy into the Netflix Prize Contenders. In KDD (2009), pp. 627-636.
41. NARAYANAN, A., AND SHMATIKOV, V. Robust De-anonymization of Large Sparse Datasets. In IEEE Symposium on Security and Privacy (2008), pp. 111-125.
42. PAILLIER, P. Public-Key Cryptosystems Based on Composite Degree Residuosity Classes. In EUROCRYPT (1999), pp. 223238.
43. PANG, R., ALLMAN, M., PAXSON, V., AND LEE, J. The devil and packet trace anonymization. Computer Communication Review 36, 1 (2006), 29-38.
44. PARNO, B., MCCUNE, J. M., AND PERRIG, A. Bootstrapping Trust in Commodity Computers. In IEEE Symposium on Security and Privacy (2010), pp. 414-429.
45. RASTOGI, V., AND NATH, S. Differentially private aggregation of distributed time-series with transformation and encryption. In SIGMOD Conference (2010), pp. 735-746.
46. RIBEIRO, B. F., CHEN, W., MIKLAU, G., AND TOWSLEY, D. F. Analyzing Privacy in Enterprise Packet Trace Anonymization. In NDSS (2008).
47. ROY, I., SETTY, S. T.V., KILZER, A., SHMATIKOV, V., AND WITCHEL, E. Airavat: Security and Privacy for MapReduce. In NSDI (2010), pp. 297-312.
48. SHALLIT, J., AND SORENSON, J. A binary algorithm for the Jacobi symbol. ACM SIGSAM Bulletin 27, 1 (1993), 4-11.
49. SHI, E., CHAN, T.-H. H., RIEFFEL, E. G., CHOW, R., AND SONG, D. Privacy-Preserving Aggregation of Time-Series Data. In NDSS (2011).
50. SWEENEY, L. k-Anonymity: A Model for Protecting Privacy. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems 10, 5 (2002), 557-570.
51. TOUBIANA, V., NARAYANAN, A., BONEH, D., NISSENBAUM, H., AND BAROCAS, S. Adnostic: Privacy Preserving Targeted Advertising. In NDSS (2010).
52. YAO, A. C.-C. Protocols for Secure Computations. In FOCS (1982), pp. 160-164.