@article {955336,
	title = {Recoding Privacy Law: Reflections on the Future Relationship Among Law, Technology, and Privacy},
	journal = {Harvard Law Review },
	year = {2016},
	month = {12 Dec, 2016},
	url = {http://harvardlawreview.org/2016/12/recoding-privacy-law-reflections-on-the-future-relationship-among-law-technology-and-privacy/},
	author = {Gasser, Urs}
}
@article {962676,
	title = {Computer-Aided Verification in Mechanism Design},
	journal = {Conference on Internet and Economics, WINE },
	year = {2016},
	month = {Dec 2016},
	author = {G. Barthe and M. Gaboardi and E. J. Gallego Arias and J. Hsu and A. Roth and P.-Y. Strub}
}
@article {962686,
	title = {Advanced Probabilistic Couplings for Differential Privacy},
	journal = {23rd ACM Conference on Computer and Communications Security, CCS},
	year = {2016},
	month = {Oct 2016},
	author = {G. Barthe and N. Fong and M. Gaboardi and B. Gregoire and J. Hsu and P.-Y. Strub}
}
@article {924886,
	title = {Generic Attacks on Secure Outsourced Databases},
	journal = {23rd ACM Conference on Computer and Communications Security},
	year = {2016},
	month = {Oct 2016},
	abstract = {Recently, various protocols have been proposed for securely outsourcing database storage to a third party server, ranging from systems with {\textquotedblleft}full-fledged{\textquotedblright} security based on strong cryptographic primitives such as fully homomorphic encryption or oblivious RAM, to more practical implementations based on searchable symmetric encryption or even on deterministic and order-preserving encryption. On the flip side, various attacks have emerged that show that for some of these protocols confidentiality of the data can be compromised, usually given certain auxiliary information. We take a step back and identify a need for a formal understanding of the inherent efficiency/privacy trade-off in outsourced database systems, independent of the details of the system. We propose abstract models that capture secure outsourced storage systems in sufficient generality, and identify two basic sources of leakage, namely access pattern and communication volume. We use our models to distinguish certain classes of outsourced database systems that have been proposed, and deduce that all of them exhibit at least one of these leakage sources. We then develop generic reconstruction attacks on any system supporting range queries where either access pattern or communication volume is leaked. These attacks are in a rather weak passive adversarial model, where the untrusted server knows only the underlying query distribution. In particular, to perform our attack the server need not have any prior knowledge about the data, and need not know any of the issued queries nor their results. Yet, the server can reconstruct the secret attribute of every record in the database after about N 4 queries, where N is the domain size. We provide a matching lower bound showing that our attacks are\&nbsp;essentially optimal. Our reconstruction attacks using communication volume apply even to systems based on homomorphic encryption or oblivious RAM in the natural way. Finally, we provide experimental results demonstrating the efficacy of our attacks on real datasets with a variety of different features. On all these datasets, after the required number of queries our attacks successfully recovered the secret attributes of every record in at most a few seconds.},
	author = {Georgios Kellaris and George Kollios and Kobbi Nissim and Adam O{\textquoteright}Neill}
}
@conference {892537,
	title = {DataTags, Data Handling Policy Spaces and the Tags Language},
	booktitle = {Security and Privacy Workshops (SPW), 2016 IEEE},
	year = {2016},
	month = {22-26 May },
	publisher = {IEEE},
	organization = {IEEE},
	address = {San Jose, California },
	abstract = {Widespread sharing of scientific datasets holds great promise for new scientific discoveries and great risks for personal privacy. Dataset handling policies play the critical role of balancing privacy risks and scientific value. We propose an extensible, formal, theoretical model for dataset handling policies. We define binary operators for policy composition and for comparing policy strictness, such that propositions like "this policy is stricter than that policy" can be formally phrased. Using this model, The policies are described in a machine-executable and human-readable way. We further present the Tags programming language and toolset, created especially for working with the proposed model. Tags allows composing interactive, friendly questionnaires which, when given a dataset, can suggest a data handling policy that follows legal and technical guidelines. Currently, creating such a policy is a manual process requiring access to legal and technical experts, which are not always available. We present some of Tags{\textquoteright} tools, such as interview systems, visualizers, development environment, and questionnaire inspectors. Finally, we discuss methodologies for questionnaire development. Data for this paper include a questionnaire for suggesting a HIPAA compliant data handling policy, and formal description of the set of data tags proposed by the authors in a recent paper.},
	url = {http://ieeexplore.ieee.org/document/7527746/?reload=true\&arnumber=7527746},
	author = {Bar-Sinai, Michael and Sweeney, Latanya and Merce Crosas}
}
@conference {741496,
	title = {PSI (Ψ): a Private data Sharing Interface},
	booktitle = {Theory and Practice of Differential Privacy},
	year = {2016},
	month = {2016},
	address = {New York, NY},
	abstract = {We provide an overview of PSI ({\textquotedblleft}a Private data Sharing Interface{\textquotedblright}), a system we are devel- oping to enable researchers in the social sciences and other fields to share and explore privacy- sensitive datasets with the strong privacy protections of differential privacy.Poster presented at Theory and Practice of Differential Privacy (TPDP 2016).},
	url = {https://arxiv.org/abs/1609.04340},
	author = {Marco Gaboardi and James Honaker and Gary King and Kobbi Nissim and Jonathan Ullman and Salil Vadhan and Jack Murtagh}
}
@article {878581,
	title = {Truthful Mechanisms for Agents that Value Privacy},
	journal = {ACM Transactions on Economics and Computation (TEAC)},
	volume = {4},
	number = {3},
	year = {2016},
	abstract = {Recent work has constructed economic mechanisms that are both truthful and differentially private. In these mechanisms, privacy is treated separately from truthfulness; it is not incorporated in players{\textquoteright} utility functions (and doing so has been shown to lead to nontruthfulness in some cases). In this work, we propose a new, general way of modeling privacy in players{\textquoteright} utility functions. Specifically, we only assume that if an outcome\&nbsp;o\&nbsp;has the property that any report of player\&nbsp;i\&nbsp;would have led to\&nbsp;o\&nbsp;with approximately the same probability, then\&nbsp;o\&nbsp;has a small privacy cost to player\&nbsp;i. We give three mechanisms that are truthful with respect to our modeling of privacy: for an election between two candidates, for a discrete version of the facility location problem, and for a general social choice problem with discrete utilities (via a VCG-like mechanism). As the number\&nbsp;n\&nbsp;of players increases, the social welfare achieved by our mechanisms approaches optimal (as a fraction of\&nbsp;n).},
	url = {http://dl.acm.org/citation.cfm?doid=2905047.2892555},
	author = {Yiling Chen and Stephen Chong and Ian Kash and Tal Moran and Salil Vadhan}
}
@article {924691,
	title = {Asymptotic and Finite-Sample Properties of Estimators based on Stochastic Gradients},
	journal = {Annals of Statistics},
	year = {2016},
	abstract = {Stochastic gradient descent procedures have gained popularity for parameter estimation from large data sets. However, their statistical properties are not well understood, in theory. And in practice, avoiding numerical instability requires careful tuning of key parameters. Here, we introduce implicit stochastic gradient descent procedures, which involve parameter updates that are implicitly defined. Intuitively, implicit updates shrink standard stochastic gradient descent updates. The amount of shrinkage depends on the observed Fisher information matrix, which does not need to be explicitly computed; thus, implicit procedures increase stability without increasing the computational burden. Our theoretical analysis provides the first full characterization of the asymptotic behavior of both standard and implicit stochastic gradient descent-based estimators, including finite-sample error bounds. Importantly, analytical expressions for the variances of these stochastic gradient-based estimators reveal their exact loss of efficiency. We also develop new algorithms to compute implicit stochastic gradient descent-based estimators for generalized linear models, Cox proportional hazards, M-estimators, in practice, and perform extensive experiments. Our results suggest that implicit stochastic gradient descent procedures are poised to become a workhorse for approximate inference from large data sets.},
	url = {https://arxiv.org/abs/1408.2923},
	author = {Toulis Panagiotis and Edoardo Airoldi}
}
@article {924741,
	title = {Private Posterior Distributions from Variational Approximations},
	journal = {NIPS 2015 Workshop on Learning and Privacy with Incomplete Data and Weak Supervision},
	year = {2016},
	abstract = {Privacy preserving mechanisms such as differential privacy inject additional randomness in the form of noise in the data, beyond the sampling mechanism. Ignoring this additional noise can lead to inaccurate and invalid inferences. In this paper, we incorporate the privacy mechanism explicitly into the likelihood function by treating the original data as missing, with an end goal of estimating posterior distributions over model parameters. This leads to a principled way of performing valid statistical inference using private data, however, the corresponding likelihoods are intractable. In this paper, we derive fast and accurate variational approximations to tackle such intractable likelihoods that arise due to privacy. We focus on estimating posterior distributions of parameters of the naive Bayes log-linear model, where the sufficient statistics of this model are shared using a differentially private interface. Using a simulation study, we show that the posterior approximations outperform the naive method of ignoring the noise addition mechanism.},
	url = {https://arxiv.org/abs/1511.07896},
	author = {Vishesh Karwa and Dan Kifer and Aleksandra Slavkovic}
}
@article {871291,
	title = {Strictly Biomedical? Sketching the Ethics of the Big Data Ecosystem in Biomedicine},
	journal = {The Ethics of Biomedical Big Data},
	year = {2016},
	abstract = {In today{\textquoteright}s ever evolving data ecosystem it is evident that data generated for a wide range of purposes unrelated to biomedicine possess tremendous potential value for biomedical research. Analyses of our Google searches, social media content, loyalty card points and the like are used to draw a fairly accurate picture of our health, our future health, our attitudes towards vaccination, disease outbreaks within a county and epidemic trajectories in other continents. These data sets are different from traditional biomedical data, if a biomedical purpose is the categorical variable. Yet the results their analyses yield are of serious biomedical relevance. This paper discusses important but unresolved challenges within typical biomedical data, and it explores examples of non-biomedical Big Data with high biomedical value, including the specific conundrums these engender, especially when we apply biomedical data concepts to them. It also highlights the {\textquotedblleft}digital phenotype{\textquotedblright} project, illustrating the Big Data ecosystem in action and an approach believed as likely to yield biomedical and health knowledge. We argue that to address the challenges and make full use of the opportunities that Big Data offers to biomedicine, a new ethical framework taking a data ecosystem approach is urgently needed. We conclude by discussing key components, design requirements and substantive normative elements of such a framework.},
	url = {http://link.springer.com/chapter/10.1007/978-3-319-33525-4_2},
	author = {Effy Vayena and Gasser, Urs}
}
@article {924716,
	title = {Adaptive Learning with Robust Generalization Guarantees},
	journal = {Conference on Learning Theory (COLT)},
	year = {2016},
	abstract = {The traditional notion of generalization---i.e., learning a hypothesis whose empirical error is close to its true error---is surprisingly brittle. As has recently been noted in [DFH+15b], even if several algorithms have this guarantee in isolation, the guarantee need not hold if the algorithms are composed adaptively. In this paper, we study three notions of generalization---increasing in strength---that are robust to postprocessing and amenable to adaptive composition, and examine the relationships between them. We call the weakest such notion Robust Generalization. A second, intermediate, notion is the stability guarantee known as differential privacy. The strongest guarantee we consider we call Perfect Generalization. We prove that every hypothesis class that is PAC learnable is also PAC learnable in a robustly generalizing fashion, with almost the same sample complexity. It was previously known that differentially private algorithms satisfy robust generalization. In this paper, we show that robust generalization is a strictly weaker concept, and that there is a learning task that can be carried out subject to robust generalization guarantees, yet cannot be carried out subject to differential privacy. We also show that perfect generalization is a strictly stronger guarantee than differential privacy, but that, nevertheless, many learning tasks can be carried out subject to the guarantees of perfect generalization.},
	url = {https://arxiv.org/abs/1602.07726},
	author = {Rachel Cummings and Katrina Ligett and Kobbi Nissim and Aaron Roth and Zhiwei Steven Wu}
}
@article {924721,
	title = {Algorithmic Stability for Adaptive Data Analysis},
	journal = {48th Annual Symposium on the Theory of Computing},
	year = {2016},
	abstract = {Adaptivity is an important feature of data analysis---the choice of questions to ask about a dataset often depends on previous interactions with the same dataset. However, statistical validity is typically studied in a nonadaptive model, where all questions are specified before the dataset is drawn. Recent work by Dwork et al. (STOC, 2015) and Hardt and Ullman (FOCS, 2014) initiated the formal study of this problem, and gave the first upper and lower bounds on the achievable generalization error for adaptive data analysis.\&nbsp;Specifically, suppose there is an unknown distribution\&nbsp;P\&nbsp;and a set of\&nbsp;n\&nbsp;independent samples\&nbsp;x\&nbsp;is drawn from\&nbsp;P. We seek an algorithm that, given\&nbsp;x\&nbsp;as input, accurately answers a sequence of adaptively chosen queries about the unknown distribution\&nbsp;P. How many samples\&nbsp;n\&nbsp;must we draw from the distribution, as a function of the type of queries, the number of queries, and the desired level of accuracy?\&nbsp;In this work we make two new contributions:\&nbsp;(i) We give upper bounds on the number of samples\&nbsp;n\&nbsp;that are needed to answer statistical queries. The bounds improve and simplify the work of Dwork et al. (STOC, 2015), and have been applied in subsequent work by those authors (Science, 2015, NIPS, 2015).\&nbsp;(ii) We prove the first upper bounds on the number of samples required to answer more general families of queries. These include arbitrary low-sensitivity queries and an important class of optimization queries.\&nbsp;As in Dwork et al., our algorithms are based on a connection with algorithmic stability in the form of differential privacy. We extend their work by giving a quantitatively optimal, more general, and simpler proof of their main theorem that stability implies low generalization error. We also study weaker stability guarantees such as bounded KL divergence and total variation distance.},
	url = {https://arxiv.org/abs/1511.02513v1},
	author = {Raef Bassily and Kobbi Nissim and Smith, Adam and Thomas Steinke and Uri Stemmer and Jonathan Ullman}
}
@article {648801,
	title = {Between Openness and Privacy in Genomics.},
	journal = {PLoS Med },
	volume = {13},
	number = {1},
	year = {2016},
	abstract = {Summary PointsAdvancing genomic research depends on the accessing and sharing of genomic data. However, the increasing need for sharing escalates the tension between genomic privacy and openness.Promoting openness while protecting privacy is a challenge that cannot be overcome only with technical solutions such as encryption and differential privacy. Although such solutions are crucial, we still need to confront some fundamental normative tensions that are intensified in the era of genomics and big data. Here are at least three:The right to genomic privacy is not an absolute right. If privacy is understood as control over information or data, privacy is not about maximal levels of control, but rather about reasonable measures of control.Although individual control is necessary, it is not a sufficient safeguard of privacy. Individuals{\textquoteright} willingness to be open about their data does not obviate responsibility for reducing privacy risks on the part of the data users.Data governance models, such as data cooperatives, that enable meaningful and continuous roles of the individuals whose data are at stake hold promise for reconciling privacy and openness.},
	url = {http://journals.plos.org/plosmedicine/article?id=10.1371/journal.pmed.1001937},
	author = {Effy Vayena and Gasser, Urs}
}
@article {924681,
	title = {Concentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds},
	journal = {14th Theory of Cryptography Conference},
	year = {2016},
	abstract = {"Concentrated differential privacy" was recently introduced by Dwork and Rothblum as a relaxation of differential privacy, which permits sharper analyses of many privacy-preserving computations. We present an alternative formulation of the concept of concentrated differential privacy in terms of the Renyi divergence between the distributions obtained by running an algorithm on neighboring inputs. With this reformulation in hand, we prove sharper quantitative results, establish lower bounds, and raise a few new questions. We also unify this approach with approximate differential privacy by giving an appropriate definition of "approximate concentrated differential privacy."},
	url = {https://arxiv.org/abs/1605.02065},
	author = {Mark Bun and Thomas Steinke}
}
@article {1200506,
	title = {Differentially Private Bayesian Programming},
	journal = {23rd ACM Conference on Computer and Communications Security, CCS},
	year = {2016},
	author = {G. Barthe and P.-Y. Strub and J. Hsu and A. D. Gordon and E. J. Gallego Arias and M. Gaboardi and G. P. Farina}
}
@article {648451,
	title = {Differentially Private Chi-Squared Hypothesis Testing: Goodness of Fit and Independence Testing},
	journal = {Proceedings of The 33rd International Conference on Machine Learning, PMLR },
	year = {2016},
	abstract = {
	Hypothesis testing is a useful statistical tool in determining whether a given model should be rejected based on a sample from the population. Sample data may contain sensitive information about individuals, such as medical information. Thus it is important to design statistical tests that guarantee the privacy of subjects in the data. In this work, we study hypothesis testing subject to differential privacy, specifically chi-squared tests for goodness of fit for multinomial data and independence between two categorical variables.We propose new tests for goodness of fit and independence testing that like the classical versions can be used to determine whether a given model should be rejected or not, and that additionally can ensure differential privacy. We give both Monte Carlo based hypothesis tests as well as hypothesis tests that more closely follow the classical chi-squared goodness of fit test and the Pearson chi-squared test for independence. Crucially, our tests account for the distribution of the noise that is injected to ensure privacy in determining significance.We show that these tests can be used to achieve desired significance levels, in sharp contrast to direct applications of classical tests to differentially private contingency tables which can result in wildly varying significance levels. Moreover, we study the statistical power of these tests. We empirically show that to achieve the same level of power as the classical non-private tests our new tests need only a relatively modest increase in sample size.

},
	url = {http://proceedings.mlr.press/v48/rogers16.html},
	author = {Marco Gaboardi and Hyun woo Lim and Ryan Rogers and Salil Vadhan}
}
@article {698926,
	title = {Elements of a New Ethical Framework for Big Data Research},
	journal = {Washington and Lee Law Review},
	volume = {72},
	number = {3},
	year = {2016},
	month = {31 Mar, 2016},
	abstract = {merging large-scale data sources hold tremendous potential for new scientific research into human biology, behaviors, and relationships. At the same time, big data research presents privacy and ethical challenges that the current regulatory framework is ill-suited to address. In light of the immense value of large-scale research data, the central question moving forward is not whether such data should be made available for research, but rather how the benefits can be captured in a way that respects fundamental principles of ethics and privacy.In response, this Essay outlines elements of a new ethical framework for big data research. It argues that oversight should aim to provide universal coverage of human subjects research, regardless of funding source, across all stages of the information lifecycle. New definitions and standards should be developed based on a modern understanding of privacy science and the expectations of research subjects. In addition, researchers and review boards should be encouraged to incorporate systematic risk-benefit assessments and new procedural and technological solutions from the wide range of interventions that are available. Finally, oversight mechanisms and the safeguards implemented should be tailored to the intended uses, benefits, threats, harms, and vulnerabilities associated with a specific research activity.Development of a new ethical framework with these elements should be the product of a dynamic multistakeholder process that is designed to capture the latest scientific understanding of privacy, analytical methods, available safeguards, community and social norms, and best practices for research ethics as they evolve over time. Such a framework would support big data utilization and help harness the value of big data in a sustainable and trust-building manner.},
	url = {http://lawreview.journals.wlu.io/elements-of-a-new-ethical-framework-for-big-data-research/},
	author = {Effy Vayena and Gasser, Urs and Alexandra Wood and David R. O{\textquoteright}Brien and Micah Altman}
}
@article {625931,
	title = {Inference Using Noisy Degrees: Differentially Private Beta-Model and Synthetic Graphs},
	journal = {Annals of Statistics },
	volume = {44},
	number = {1},
	year = {2016},
	pages = {87-112},
	abstract = {
	The β-model of random graphs is an exponential family model with the degree sequence as a sufficient statistic. In this paper, we contribute three key results. First, we characterize conditions that lead to a quadratic time algorithm to check for the existence of MLE of the β-model, and show that the MLE never exists for the degree partition β-model. Second, motivated by privacy problems with network data, we derive a differentially private estimator of the parameters of β-model, and show it is consistent and asymptotically normally distributed - it achieves the same rate of convergence as the nonprivate estimator. We present an efficient algorithm for the private estimator that can be used to release synthetic graphs. Our techniques can also be used to release degree distributions and degree partitions accurately and privately, and to perform inference from noisy degrees arising from contexts other than privacy. We evaluate the proposed estimator on real graphs and compare it with a current algorithm for releasing degree distributions and find that it does significantly better. Finally, our paper addresses shortcomings of current approaches to a fundamental problem of how to perform valid statistical inference from data released by privacy mechanisms, and lays a foundational groundwork on how to achieve optimal and private statistical inference in a principled manner by modeling the privacy mechanism; these principles should be applicable to a class of models beyond the β-model.

},
	author = {Vishesh Karwa and Aleksandra Slavkovi{\'c}}
}
@article {1200626,
	title = {Lipschitz Extensions for Node\&shy;Private Graph Statistics and the Generalized Exponential Mechanism},
	journal = {Proceedings of the 57th Annual IEEE Symposium on Foundations of Computer Science (FOCS)},
	year = {2016},
	author = {Raskhodnikova, Sofya and Smith, Adam}
}
@conference {689096,
	title = {Locating a Small Cluster Privately},
	booktitle = {PODS 2016},
	year = {2016},
	month = {June 26 2016},
	address = {ACM SIGMOD/PODS Conference, San Francisco, USA, 2016},
	abstract = {
	We present a new algorithm for locating a small cluster of points with differential privacy [Dwork, McSherry, Nissim,and Smith, 2006]. Our algorithm has implications to private data exploration, clustering, and removal of outliers. Furthermore, we use it to significantly relax the requirements of the sample and aggregate technique [Nissim, Raskhodnikova,and Smith, 2007], which allows compiling of "off the shelf" (non-private) analyses into analyses that preserve differential privacy.

},
	author = {Kobbi Nissim and Uri Stemmer and Salil Vadhan}
}
@conference {555266,
	title = {Order revealing encryption and the hardness of private learning},
	booktitle = {Proceedings of the 12th Theory of Cryptography Conference (TCC 2016)},
	year = {2016},
	month = {1/10-13/2016},
	address = { Tel-Aviv, Israel},
	abstract = {An order-revealing encryption scheme gives a public procedure by which two ciphertexts can be compared to reveal the ordering of their underlying plaintexts. We show how to use order-revealing encryption to separate computationally efficient PAC learning from efficient (ϵ,δ)-differentially private PAC learning. That is, we construct a concept class that is efficiently PAC learnable, but for which every efficient learner fails to be differentially private. This answers a question of Kasiviswanathan et al. (FOCS {\textquoteright}08, SIAM J. Comput. {\textquoteright}11).To prove our result, we give a generic transformation from an order-revealing encryption scheme into one with strongly correct comparison, which enables the consistent comparison of ciphertexts that are not obtained as the valid encryption of any message. We believe this construction may be of independent interest.},
	author = {Mark Bun and Mark Zhandry}
}
@unpublished {948156,
	title = {Practical Approaches to Big Data Privacy Over Time},
	journal = {Brussels Privacy Symposium},
	year = {2016},
	month = {2016},
	address = {Brussels, Belgium},
	abstract = {Increasingly, governments and businesses are collecting, analyzing, and sharing detailed information about individuals over long periods of time. Vast quantities of data from new sources and novel methods for large-scale data analysis promise to yield deeper understanding of human characteristics, behavior, and relationships and advance the state of science, public policy, and innovation. At the same time, the collection and use of fine-grained personal data over time is associated with significant risks to individuals, groups, and society at large. In this article, we examine a range of longterm data collections, conducted by researchers in social science, in order to identify the characteristics of these programs that drive their unique sets of risks and benefits. We also examine the practices that have been established by social scientists to protect the privacy of data subjects in light of the challenges presented in long-term studies. We argue that many uses of big data, across academic, government, and industry settings, have characteristics similar to those of traditional long-term research studies. In this article, we discuss the lessons that can be learned from longstanding data management practices in research and potentially applied in the context of newly emerging data sources and uses.},
	author = {Micah Altman and Alexandra Wood and David R. O{\textquoteright}Brien and Gasser, Urs}
}
@article {757246,
	title = {Privacy Odometers and Filters: Pay-as-you-Go Composition},
	journal = {Neural Information Processing Systems (NIPS)},
	year = {2016},
	month = {2016},
	abstract = {In this paper we initiate the study of adaptive composition in differential privacy when the length of the composition, and the privacy parameters themselves can be chosen adaptively, as a function of the outcome of previously run analyses. This case is much more delicate than the setting covered by existing composition theorems, in which the algorithms themselves can be chosen adaptively, but the privacy parameters must be fixed up front. Indeed, it isn{\textquoteright}t even clear how to define differential privacy in the adaptive parameter setting. We proceed by defining two objects which cover the two main use cases of composition theorems. A privacy filter is a stopping time rule that allows an analyst to halt a computation before his pre-specified privacy budget is exceeded. A privacy odometer allows the analyst to track realized privacy loss as he goes, without needing to pre-specify a privacy budget. We show that unlike the case in which privacy parameters are fixed, in the adaptive parameter setting, these two use cases are distinct. We show that there exist privacy filters with bounds comparable (up to constants) with existing privacy composition theorems. We also give a privacy odometer that nearly matches non-adaptive private composition theorems, but is sometimes worse by a small asymptotic factor. Moreover, we show that this is inherent, and that any valid privacy odometer in the adaptive parameter setting must lose this factor, which shows a formal separation between the filter and odometer use-cases.},
	author = {Ryan Rogers and Aaron Roth and Jonathan Ullman and Salil Vadhan}
}
@article {924671,
	title = {Sensitivity of Counting Queries},
	journal = {43rd International Colloquium on Automata, Languages, and Programming},
	year = {2016},
	abstract = {In the context of statistical databases, the release of accurate statistical information about the collected data often puts at risk the privacy of the individual contributors. The goal of differential privacy is to maximize the utility of a query while protecting the individual records in the database. A natural way to achieve differential privacy is to add statistical noise to the result of the query. In this context, a mechanism for releasing statistical information is thus a trade-off between utility and privacy. In order to balance these two "conflicting" requirements, privacy preserving mechanisms calibrate the added noise to the so-called sensitivity of the query, and thus a precise estimate of the sensitivity of the query is necessary to determine the amplitude of the noise to be added. In this paper, we initiate a systematic study of sensitivity of counting queries over relational databases. We first observe that the sensitivity of a Relational Algebra query with counting is not computable in general, and that while the sensitivity of Conjunctive Queries with counting is computable, it becomes unbounded as soon as the query includes a join. We then consider restricted classes of databases (databases with constraints), and study the problem of computing the sensitivity of a query given such constraints. We are able to establish bounds on the sensitivity of counting conjunctive queries over constrained databases. The kind of constraints studied here are: functional dependencies and cardinality dependencies. The latter is a natural generalization of functional dependencies that allows us to provide tight bounds on the sensitivity of counting conjunctive queries.},
	author = {Myrto Arapinis and Diego Figueira and Marco Gaboardi}
}
@article {870851,
	title = {Separating Computational and Statistical Differential Privacy in the Client-Server Model},
	journal = {Proceedings of the 14th Theory of Cryptography Conference (TCC 2016-B)},
	year = {2016},
	month = {Aug 2016},
	abstract = {Differential privacy is a mathematical definition of privacy for statistical data analysis. It guarantees that any (possibly adversarial) data analyst is unable to learn too much information that is specific to an individual. Mironov et al. (CRYPTO 2009) proposed several computational relaxations of differential privacy (CDP), which relax this guarantee to hold only against computationally bounded adversaries. Their work and subsequent work showed that CDP can yield substantial accuracy improvements in various multiparty privacy problems. However, these works left open whether such improvements are possible in the traditional client-server model of data analysis. In fact, Groce, Katz and Yerukhimovich (TCC 2011) showed that, in this setting, it is impossible to take advantage of CDP for many natural statistical tasks. Our main result shows that, assuming the existence of sub-exponentially secure one-way functions and 2-message witness indistinguishable proofs (zaps) for NP, that there is in fact a computational task in the client-server model that can be efficiently performed with CDP, but is infeasible to perform with information-theoretic differential privacy.},
	author = {Mark Bun and Yi Hsiu Chen and Salil Vadhan}
}
@article {555476,
	title = {Towards a Modern Approach to Privacy-Aware Government Data Releases},
	journal = { Berkeley Technology Law Journal},
	volume = {30},
	number = {3},
	year = {2016},
	abstract = {
	This article summarizes research exploring various models by which governments release data to the public and the interventions in place to protect the privacy of individuals in the data. Applying concepts from the recent scientific and legal literature on privacy, the authors propose a framework for a modern privacy analysis and illustrate how governments can use the framework to select appropriate privacy controls that are calibrated to the specific benefits and risks in individual data releases.

},
	author = {Micah Altman and Alexandra Wood and O{\textquoteright}Brien, David and Salil Vadhan and Gasser, Urs}
}
@mastersthesis {1200676,
	title = {Upper and Lower Bounds for Privacy and Adaptivity in Algorithmic Data Analysis},
	year = {2016},
	type = {PhD Thesis},
	author = {Thomas Steinke}
}
