{"id":"https://openalex.org/W3108844536","doi":"https://doi.org/10.1145/3428233","title":"Testing differential privacy with dual interpreters","display_name":"Testing differential privacy with dual interpreters","publication_year":2020,"publication_date":"2020-11-13","ids":{"openalex":"https://openalex.org/W3108844536","doi":"https://doi.org/10.1145/3428233","mag":"3108844536"},"language":"en","primary_location":{"id":"doi:10.1145/3428233","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3428233","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3428233","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3428233","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010653419","display_name":"Hengchu Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hengchu Zhang","raw_affiliation_strings":["University of Pennsylvania, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, USA","institution_ids":["https://openalex.org/I36788626"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085785749","display_name":"Edo Roth","orcid":"https://orcid.org/0009-0008-8126-6009"},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edo Roth","raw_affiliation_strings":["University of Pennsylvania, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, USA","institution_ids":["https://openalex.org/I36788626"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057845948","display_name":"Andreas Haeberlen","orcid":"https://orcid.org/0000-0002-3271-8354"},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andreas Haeberlen","raw_affiliation_strings":["University of Pennsylvania, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, USA","institution_ids":["https://openalex.org/I36788626"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085361253","display_name":"Benjamin C. Pierce","orcid":"https://orcid.org/0000-0001-7839-1636"},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Benjamin C. Pierce","raw_affiliation_strings":["University of Pennsylvania, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, USA","institution_ids":["https://openalex.org/I36788626"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057693522","display_name":"Aaron Roth","orcid":"https://orcid.org/0000-0002-0586-0515"},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aaron Roth","raw_affiliation_strings":["University of Pennsylvania, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, USA","institution_ids":["https://openalex.org/I36788626"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I36788626"],"apc_list":null,"apc_paid":null,"fwci":1.1734,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.84035387,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"4","issue":"OOPSLA","first_page":"1","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9751999974250793,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.9430950880050659},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.828302264213562},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.5537570118904114},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5268106460571289},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5098894834518433},{"id":"https://openalex.org/keywords/programmer","display_name":"Programmer","score":0.4614194333553314},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4519120156764984},{"id":"https://openalex.org/keywords/pointwise","display_name":"Pointwise","score":0.4467509388923645},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.4327566921710968},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.4317173361778259},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.42547258734703064},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4092187285423279},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3253166675567627},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32215166091918945},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.22244486212730408},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.13934534788131714},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10540848970413208}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.9430950880050659},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.828302264213562},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.5537570118904114},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5268106460571289},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5098894834518433},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.4614194333553314},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4519120156764984},{"id":"https://openalex.org/C2777984123","wikidata":"https://www.wikidata.org/wiki/Q9248237","display_name":"Pointwise","level":2,"score":0.4467509388923645},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.4327566921710968},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.4317173361778259},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.42547258734703064},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4092187285423279},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3253166675567627},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32215166091918945},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.22244486212730408},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.13934534788131714},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10540848970413208},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3428233","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3428233","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3428233","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3428233","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3428233","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3428233","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5899999737739563,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1164608561","display_name":null,"funder_award_id":"CNS-1065060 and CNS-1513694","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2852898138","display_name":null,"funder_award_id":"CNS-1513694","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4127031992","display_name":"TC: Medium: Putting Differential Privacy To Work","funder_award_id":"1065060","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5900154129","display_name":"TWC: Medium: Distributed Differential Privacy","funder_award_id":"1513694","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8128174158","display_name":null,"funder_award_id":"CNS-1065060","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309370","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1480909796","https://openalex.org/W2042946599","https://openalex.org/W2091815328","https://openalex.org/W2092640107","https://openalex.org/W2097061283","https://openalex.org/W2101512909","https://openalex.org/W2154086287","https://openalex.org/W2156876717","https://openalex.org/W2174554963","https://openalex.org/W2236011587","https://openalex.org/W2295961883","https://openalex.org/W2296133386","https://openalex.org/W2301774247","https://openalex.org/W2462334487","https://openalex.org/W2565203757","https://openalex.org/W2753900993","https://openalex.org/W2754729435","https://openalex.org/W2886153332","https://openalex.org/W2889785340","https://openalex.org/W2925599298","https://openalex.org/W2962727778","https://openalex.org/W2962796461","https://openalex.org/W2963506795","https://openalex.org/W2964546016","https://openalex.org/W2975856493","https://openalex.org/W2980019266","https://openalex.org/W2990138404","https://openalex.org/W3011737828","https://openalex.org/W3013397595","https://openalex.org/W3016856519","https://openalex.org/W3098424123","https://openalex.org/W3098696637","https://openalex.org/W3100637409","https://openalex.org/W3104035686","https://openalex.org/W3104159150","https://openalex.org/W3123629616","https://openalex.org/W4205228770","https://openalex.org/W4231112862","https://openalex.org/W4242148922","https://openalex.org/W4255375128","https://openalex.org/W6963215929"],"related_works":["https://openalex.org/W2379153735","https://openalex.org/W2140020064","https://openalex.org/W143502885","https://openalex.org/W2046172023","https://openalex.org/W3038283795","https://openalex.org/W2103468410","https://openalex.org/W2972896947","https://openalex.org/W1856228368","https://openalex.org/W2604501336","https://openalex.org/W1968809652"],"abstract_inverted_index":{"Applying":[0],"differential":[1,28,39,130],"privacy":[2,166],"at":[3],"scale":[4],"requires":[5,45],"convenient":[6],"ways":[7],"to":[8,63,163],"check":[9],"that":[10,75],"programs":[11],"computing":[12],"with":[13],"sensitive":[14],"data":[15],"appropriately":[16],"preserve":[17],"privacy.":[18,40],"We":[19,82,113,151],"propose":[20],"here":[21],"a":[22,31,71,90,160],"fully":[23,60],"automated":[24,61],"framework":[25,62],"for":[26,167],"testing":[27],"privacy,":[29,131],"adapting":[30],"well-known":[32],"\u201cpointwise\u201d":[33],"technique":[34],"from":[35,123],"informal":[36],"proofs":[37],"of":[38,69,86,99,110,129],"Our":[41],"framework,":[42],"called":[43],"DPCheck,":[44],"no":[46],"programmer":[47],"annotations,":[48],"handles":[49],"all":[50,120],"previously":[51,78],"verified":[52],"or":[53],"tested":[54],"algorithms,":[55],"and":[56,66,93,135,139,146],"is":[57],"the":[58,84,97,143,148,168],"first":[59],"distinguish":[64],"correct":[65,144],"buggy":[67],"implementations":[68,145],"PrivTree,":[70],"probabilistically":[72],"terminating":[73],"algorithm":[74],"has":[76],"not":[77],"been":[79],"mechanically":[80],"checked.":[81],"analyze":[83],"probability":[85,98],"DPCheck":[87,141,155],"mistakenly":[88],"accepting":[89],"non-private":[91],"program":[92],"prove":[94],"that,":[95],"theoretically,":[96],"false":[100],"acceptance":[101],"can":[102,156],"be":[103,157],"made":[104],"exponentially":[105],"small":[106],"by":[107,118],"suitable":[108],"choice":[109],"test":[111,164],"size.":[112],"demonstrate":[114,153],"DPCheck\u2019s":[115],"utility":[116],"empirically":[117],"implementing":[119],"benchmark":[121],"algorithms":[122],"prior":[124],"work":[125],"on":[126],"mechanical":[127],"verification":[128],"plus":[132],"several":[133],"others":[134],"their":[136],"incorrect":[137,149],"variants,":[138],"show":[140],"accepts":[142],"rejects":[147],"variants.":[150],"also":[152],"how":[154],"deployed":[158],"in":[159],"practical":[161],"workflow":[162],"differentially":[165],"2020":[169],"US":[170],"Census":[171],"Disclosure":[172],"Avoidance":[173],"System":[174],"(DAS).":[175]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}