Title:Privug: Quantifying Leakage using Probabilistic Programming for Privacy Risk Analysis

Abstract:Disclosure of data analytics results has important scientific and commercial justifications. However, no disclosure should be allowed to happen without due diligence investigation of the risks that it poses for information privacy of the data subjects. Does the data analytics community have the right tools at their disposal to perform such a due diligence? We demonstrate a method, privug, that allows to explore leakage properties, or information privacy risks, involved with disclosing results of a given analytics program. The method uses classical off-the-shelf data science tools, namely Bayesian probabilistic programming libraries, exploiting the fact that they can reinterpret a regular disclosure program in probabilistic terms. This in turn allows information theoretical analysis of the program behavior. These tools and skills are often available for a data scientist pondering the disclosure questions. For privacy researchers, the method provides a fast and lightweight way to experiment with information privacy protection measures and mechanisms. We present privug on three case studies, including an exploration of parameters of a differential privacy mechanism.