118 citations · 293 across the 21 of their papers we have counts for
14 papers · 1 filter
The Privacy-Utility Trade-off in the Topics API
Mário S. Alvim, Natasha Fernandes, Annabelle McIver +1
The ongoing deprecation of third-party cookies by web browser vendors has sparked the proposal of alternative methods to support more privacy-preserving personalized advertising on…
A Quantitative Information Flow Analysis of the Topics API
Mário S. Alvim, Natasha Fernandes, Annabelle McIver +1
Third-party cookies have been a privacy concern since cookies were first developed in the mid 1990s, but more strict cookie policies were only introduced by Internet browser vendor…
A novel analysis of utility in privacy pipelines, using Kronecker products and quantitative information flow
Mário S. Alvim, Natasha Fernandes, Annabelle McIver +2
We combine Kronecker products, and quantitative information flow, to give a novel formal analysis for the fine-grained verification of utility in complex privacy pipelines. The com…
Analyzing the Shuffle Model through the Lens of Quantitative Information Flow
Mireya Jurado, Ramon G. Gonze, Mário S. Alvim +1
Local differential privacy (LDP) is a variant of differential privacy (DP) that avoids the need for a trusted central curator, at the cost of a worse trade-off between privacy and…
A novel reconstruction attack on foreign-trade official statistics, with a Brazilian case study
Danilo Fabrino Favato, Gabriel Coutinho, Mário S. Alvim +1
In this paper we describe, formalize, implement, and experimentally evaluate a novel transaction re-identification attack against official foreign-trade statistics releases in Braz…
Flexible and scalable privacy assessment for very large datasets, with an application to official governmental microdata
Mário S. Alvim, Natasha Fernandes, Annabelle McIver +2
We present a systematic refactoring of the conventional treatment of privacy analyses, basing it on mathematical concepts from the framework of Quantitative Information Flow (QIF).…
Information Leakage Games: Exploring Information as a Utility Function
Mário S. Alvim, Konstantinos Chatzikokolakis, Yusuke Kawamoto +1
A common goal in the areas of secure information flow and privacy is to build effective defenses against unwanted leakage of information. To this end, one must be able to reason ab…
Metric-based local differential privacy for statistical applications
Mário S. Alvim, Konstantinos Chatzikokolakis, Catuscia Palamidessi +1
Local differential privacy (LPD) is a distributed variant of differential privacy (DP) in which the obfuscation of the sensitive information is done at the level of the individual…
Leakage and Protocol Composition in a Game-Theoretic Perspective
Mário S. Alvim, Konstantinos Chatzikokolakis, Yusuke Kawamoto +1
In the inference attacks studied in Quantitative Information Flow (QIF), the adversary typically tries to interfere with the system in the attempt to increase its leakage of secret…
A Game-Theoretic Approach to Information-Flow Control via Protocol Composition
Mário S. Alvim, Konstantinos Chatzikokolakis, Yusuke Kawamoto +1
In the inference attacks studied in Quantitative Information Flow (QIF), the attacker typically tries to interfere with the system in the attempt to increase its leakage of secret…
An Algebraic Approach for Reasoning About Information Flow
Arthur Américo, Mário S. Alvim, Annabelle McIver
This paper concerns the analysis of information leaks in security systems. We address the problem of specifying and analyzing large systems in the (standard) channel model used in…
Information Leakage Games
Mário S. Alvim, Konstantinos Chatzikokolakis, Yusuke Kawamoto +1
We consider a game-theoretic setting to model the interplay between attacker and defender in the context of information flow, and to reason about their optimal strategies. In contr…
Quantifying vulnerability of secret generation using hyper-distributions (extended version)
Mário S. Alvim, Piotr Mardziel, Michael Hicks
Traditional approaches to Quantitative Information Flow (QIF) represent the adversary's prior knowledge of possible secret values as a single probability distribution. This represe…
Differential Privacy: on the trade-off between Utility and Information Leakage
Mário S. Alvim, Miguel E. Andrés, Konstantinos Chatzikokolakis +2
Differential privacy is a notion of privacy that has become very popular in the database community. Roughly, the idea is that a randomized query mechanism provides sufficient priva…