Fluxo de Informação Quantitativo

Esta Tese aplica métodos formais, e em particular o framework de Fluxo de Informação Quantitativo (QIF), para criar modelos escaláveis para grandes conjuntos de dados e pipelines de software que processam dados. Ao dividir sistemas complexos em seus componentes, pode-se explicar rigorosamente as vulnerabilidades de privacidade e como combatê-las afetaria a utilidade dos dados.

Esta Tese aplica métodos formais, e em particular o framework de Fluxo de Informação Quantitativo (QIF), para criar modelos escaláveis para grandes conjuntos de dados e pipelines de software que processam dados. Ao dividir sistemas complexos em seus componentes, pode-se explicar rigorosamente as vulnerabilidades de privacidade e como combatê-las afetaria a utilidade dos dados.

We analyze the re-identification risks for individual Internet users and the utility provided to advertising companies by the Topics API, i.e. learning the most popular topics and distinguishing between real and random topics. We provide theoretical results dependent only on the API parameters that can be readily applied to evaluate the privacy and utility implications of future API updates, including novel general upper-bounds that account for adversaries with access to unknown, arbitrary side information, the value of the differential privacy parameter ε, and experimental results on real-world data that validate our theoretical model.

This record provides the datasets of the paper The Privacy-Utility Trade-off in the Topics API.

This repository provides the experimental results of the paper The Privacy-Utility Trade-off in the Topics API.

We analyze the re-identification risk for individual Internet users introduced by the Topics API from the perspective of Quantitative Information Flow (QIF), an information- and decision-theoretic framework. Our model allows a theoretical analysis of both privacy and utility aspects of the API and their trade-off, and we show that the Topics API does have better privacy than third-party cookies. We leave the utility analyses for future work.

We combine Kronecker products, and quantitative information flow, to give a novel formal analysis for the fine-grained verification of utility in complex privacy pipelines. The combination explains a surprising anomaly in the behaviour of utility of privacy-preserving pipelines - that sometimes a reduction in privacy results also in a decrease in utility. We demonstrate our results on a number of common privacy-preserving designs.

We combine Kronecker products, and quantitative information flow, to give a novel formal analysis for the fine-grained verification of utility in complex privacy pipelines. The combination explains a surprising anomaly in the behaviour of utility of privacy-preserving pipelines - that sometimes a reduction in privacy results also in a decrease in utility. We demonstrate our results on a number of common privacy-preserving designs.

We present a summary of the work done in the dissertation A formal quantitative study of privacy in the publication of official educational censuses in Brazil, including its contributions and impacts so far. The dissertation presents a systematic refactoring of the conventional treatment of privacy analyses, basing it on mathematical concepts from the framework of Quantitative Information Flow (QIF). We apply our approach to a very large case study: the Educational Censuses of Brazil, curated by the governmental agency INEP, which comprise over 90 attributes of approximately 50 million individuals released longitudinally every year since 2007.

We present a systematic refactoring of the conventional treatment of privacy analyses, basing it on mathematical concepts from the framework of Quantitative Information Flow (QIF). We apply our approach to a very large case study: the Educational Censuses of Brazil, curated by the governmental agency INEP, which comprise over 90 attributes of approximately 50 million individuals released longitudinally every year since 2007.