A Linear Type System for Lp-Metric Sensitivity Analysis
Résumé
When working in optimisation or privacy protection, one may need to estimate the sensitivity of computer programs, i.e., the maximum multiplicative increase in the distance between two inputs and the corresponding two outputs. In particular, differential privacy is a rigorous and widely used notion of privacy that is closely related to sensitivity. Several type systems for sensitivity and differential privacy based on linear logic have been proposed in the literature, starting with the functional language Fuzz. However, they are either limited to certain metrics (L1 and L∞ ), and thus to the associated privacy mechanisms, or they rely on a complex notion of type contexts that does not interact well with operational semantics. We therefore propose a linear type system called Plurimetric Fuzz that handles Lp vector metrics (for 1 ≤ p ≤ +∞), uses standard type contexts, gives reasonable bounds on sensitivity, and has good metatheoretical properties. We also provide a denotational semantics in terms of metric complete partial orders, and translation mappings from and to Fuzz.
Mots clés
Lambda calculus
Differential privacy
Linear logic
type system
linear logic
sensitivity
vector metrics
differential privacy
lambda-calculus
functional programming
denotational semantics
Theory of computation → Type theory
Theory of computation → Linear logic
Security and privacy → Logic and verification
Type system
Origine | Fichiers produits par l'(les) auteur(s) |
---|