Title
Differentially-private network trace analysis
Abstract
We consider the potential for network trace analysis while providing the guarantees of "differential privacy." While differential privacy provably obscures the presence or absence of individual records in a dataset, it has two major limitations: analyses must (presently) be expressed in a higher level declarative language; and the analysis results are randomized before returning to the analyst. We report on our experiences conducting a diverse set of analyses in a differentially private manner. We are able to express all of our target analyses, though for some of them an approximate expression is required to keep the error-level low. By running these analyses on real datasets, we find that the error introduced for the sake of privacy is often (but not always) low even at high levels of privacy. We factor our learning into a toolkit that will be likely useful for other analyses. Overall, we conclude that differential privacy shows promise for a broad class of network analyses.
Year
DOI
Venue
2010
10.1145/1851182.1851199
SIGCOMM
Keywords
Field
DocType
differential privacy
Differential privacy,Computer science,Computer security,Trace analysis,Declarative programming,Private network
Conference
Volume
Issue
ISSN
40
4
0146-4833
Citations 
PageRank 
References 
54
2.19
27
Authors
2
Name
Order
Citations
PageRank
Frank McSherry14289288.94
Ratul Mahajan24735322.35