Differential Privacy versus Quantitative Information Flow - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2010

Differential Privacy versus Quantitative Information Flow

Résumé

Differential privacy is a notion of privacy that has become very popular in the database community. Roughly, the idea is that a randomized query mechanism provides sufficient privacy protection if the ratio between the probabilities of two different entries to originate a certain answer is bound by e^ε. In the fields of anonymity and information flow there is a similar concern for controlling information leakage, i.e. limiting the possibility of inferring the secret information from the observables. In recent years, researchers have proposed to quantify the leakage in terms of the information-theoretic notion of mutual information. There are two main approaches that fall in this category: One based on Shannon entropy, and one based on Rényi's min entropy. The latter has connection with the so-called Bayes risk, which expresses the probability of guessing the secret. In this paper, we show how to model the query system in terms of an information-theoretic channel, and we compare the notion of differential privacy with that of mutual information. We show that the notion of differential privacy is strictly stronger, in the sense that it implies a bound on the mutual information, but not viceversa.
Fichier principal
Vignette du fichier
main.pdf (185.88 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00548214 , version 1 (20-12-2010)

Identifiants

Citer

Mário S. Alvim, Konstantinos Chatzikokolakis, Pierpaolo Degano, Catuscia Palamidessi. Differential Privacy versus Quantitative Information Flow. 2010. ⟨hal-00548214⟩
359 Consultations
202 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More