Proving that programs are differentially private
Authors
School of Computer Science and Engineering
UNSW,
Sydney 2052, Australia
Abstract
We extend recent work in Quantitative Information Flow (QIF) to provide tools for the analysis of programs that aim to implement differentially private mechanisms. We demonstrate how differential privacy can be expressed using loss functions, and how to use this idea in conjunction with a QIF-enabled program semantics to verify differentially private guarantees. Finally we describe how to use this approach experimentally using Kuifje, a recently developed tool for analysing information-flow properties of programs.
BibTeX Entry
@inproceedings{McIver_Morgan_19, author = {McIver, Annabelle and Morgan, Carroll}, booktitle = {Programming Languages and Systems}, editor = {Lin, Anthony Widjaja}, isbn = {978-3-030-34175-6}, pages = {3--18}, paperurl = {https://trustworthy.systems/publications/papers/McIver_Morgan_19.pdf}, publisher = {Springer International Publishing}, title = {Proving that Programs Are Differentially Private}, year = {2019} }