PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

10
PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Transcript of PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Page 1: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

PRIVACY IN NETWORK TRACESIlya Mironov Microsoft Research (Silicon Valley Campus)

Page 2: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Anonymity vs Privacy

Anonymity = identity protectionPrivacy – much, much more

— Everyone of you has watched “Titanic”!

Page 3: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Personally Identifiable Information

-“Golden Standard” of privacy reviews- Language of many laws (e.g., HIPAA)

Page 4: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Personally Identifiable Information

PII =

Page 5: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Everything is PII

[Narayanan & Shmatikov, Oakland 2008]

Page 6: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Sanitization

Safe to release

- Inadequate privacy- Loss of utility[Dinur & Nissim, PODS 2003]

Page 7: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Our vision: Differential privacy

q

qr

r'

- Interactive access- Precise and general guarantees- Randomized responses[Dwork, ICALP 2006]

Page 8: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

Privacy budget

qr

qr'

privacy

Page 9: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

PINQ

LINQ: C#-based data access language PINQ: LINQ with privacy guarantees

Population density:

[McSherry, 2008]

Page 10: PRIVACY IN NETWORK TRACES Ilya Mironov Microsoft Research (Silicon Valley Campus)

More information

Microsoft Research (Silicon Valley Campus) project:

http://research.microsoft.com/research/sv/DatabasePrivacy/