Differentially Private SQL with Bounded User Contribution

Understand

Differential privacy (DP) provides formal guarantees that the output of a database query does not reveal too much information about any individual present in the database.

• While many differentially private algorithms have been proposed in the scientific literature, there are only a few end-to-end implementations of differentially private query engines.
• Crucially, existing systems assume that each individual is associated with at most one database record, which is unrealistic in practice.
• We propose a generic and scalable method to perform differentially private aggregations on databases, even when individuals can each be associated with arbitrarily many rows.