{"id":"https://openalex.org/W4411267729","doi":"https://doi.org/10.1145/3729294","title":"Verified Foundations for Differential Privacy","display_name":"Verified Foundations for Differential Privacy","publication_year":2025,"publication_date":"2025-06-10","ids":{"openalex":"https://openalex.org/W4411267729","doi":"https://doi.org/10.1145/3729294"},"language":"en","primary_location":{"id":"doi:10.1145/3729294","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3729294","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3729294","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3729294","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091004966","display_name":"Markus de Medeiros","orcid":"https://orcid.org/0009-0005-3285-5032"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Markus de Medeiros","raw_affiliation_strings":["New York University, New York, USA"],"raw_orcid":"https://orcid.org/0009-0005-3285-5032","affiliations":[{"raw_affiliation_string":"New York University, New York, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113873588","display_name":"Muhammad Naveed","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]},{"id":"https://openalex.org/I58610484","display_name":"Seattle University","ror":"https://ror.org/02jqc0m91","country_code":"US","type":"education","lineage":["https://openalex.org/I58610484"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammad Naveed","raw_affiliation_strings":["Amazon, Seattle, USA"],"raw_orcid":"https://orcid.org/0009-0009-0929-9057","affiliations":[{"raw_affiliation_string":"Amazon, Seattle, USA","institution_ids":["https://openalex.org/I1311688040","https://openalex.org/I58610484"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037225703","display_name":"Tancr\u00e8de Lepoint","orcid":"https://orcid.org/0000-0003-3796-042X"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tancr\u00e8de Lepoint","raw_affiliation_strings":["Amazon, New York, USA"],"raw_orcid":"https://orcid.org/0000-0003-3796-042X","affiliations":[{"raw_affiliation_string":"Amazon, New York, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041875141","display_name":"Temesghen Kahsai","orcid":"https://orcid.org/0000-0002-4616-5084"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Temesghen Kahsai","raw_affiliation_strings":["Amazon, Cupertino, USA"],"raw_orcid":"https://orcid.org/0000-0002-4616-5084","affiliations":[{"raw_affiliation_string":"Amazon, Cupertino, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035763535","display_name":"Tristan Ravitch","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tristan Ravitch","raw_affiliation_strings":["Amazon, Denver, USA"],"raw_orcid":"https://orcid.org/0009-0005-6967-3945","affiliations":[{"raw_affiliation_string":"Amazon, Denver, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004461595","display_name":"Stefan Zetzsche","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123934","display_name":"Amazon (United Kingdom)","ror":"https://ror.org/02xey9634","country_code":"GB","type":"company","lineage":["https://openalex.org/I1311688040","https://openalex.org/I4210123934"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Stefan Zetzsche","raw_affiliation_strings":["Amazon, London, United Kingdom"],"raw_orcid":"https://orcid.org/0009-0001-1304-0613","affiliations":[{"raw_affiliation_string":"Amazon, London, United Kingdom","institution_ids":["https://openalex.org/I4210123934"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111021192","display_name":"Anjali Joshi","orcid":null},"institutions":[{"id":"https://openalex.org/I111088046","display_name":"Boston University","ror":"https://ror.org/05qwgg493","country_code":"US","type":"education","lineage":["https://openalex.org/I111088046"]},{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anjali Joshi","raw_affiliation_strings":["Amazon, Boston, USA"],"raw_orcid":"https://orcid.org/0009-0004-9398-7242","affiliations":[{"raw_affiliation_string":"Amazon, Boston, USA","institution_ids":["https://openalex.org/I111088046","https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073987903","display_name":"Joseph Tassarotti","orcid":"https://orcid.org/0000-0001-5692-3347"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph Tassarotti","raw_affiliation_strings":["New York University, New York, USA"],"raw_orcid":"https://orcid.org/0000-0001-5692-3347","affiliations":[{"raw_affiliation_string":"New York University, New York, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050593520","display_name":"Aws Albarghouthi","orcid":"https://orcid.org/0000-0003-4577-175X"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aws Albarghouthi","raw_affiliation_strings":["Amazon, Madison, USA"],"raw_orcid":"https://orcid.org/0000-0003-4577-175X","affiliations":[{"raw_affiliation_string":"Amazon, Madison, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031329578","display_name":"Jean-Baptiste Tristan","orcid":"https://orcid.org/0000-0003-2574-7883"},"institutions":[{"id":"https://openalex.org/I111088046","display_name":"Boston University","ror":"https://ror.org/05qwgg493","country_code":"US","type":"education","lineage":["https://openalex.org/I111088046"]},{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jean-Baptiste Tristan","raw_affiliation_strings":["Amazon, Boston, USA"],"raw_orcid":"https://orcid.org/0000-0003-2574-7883","affiliations":[{"raw_affiliation_string":"Amazon, Boston, USA","institution_ids":["https://openalex.org/I111088046","https://openalex.org/I1311688040"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.3202,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.96705572,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"9","issue":"PLDI","first_page":"1094","last_page":"1118"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.7881484627723694},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.515130877494812},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.46015220880508423},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.42082342505455017},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42059820890426636},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15435418486595154},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.1412789523601532},{"id":"https://openalex.org/keywords/aerospace-engineering","display_name":"Aerospace engineering","score":0.048832207918167114}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.7881484627723694},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.515130877494812},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.46015220880508423},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.42082342505455017},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42059820890426636},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15435418486595154},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.1412789523601532},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.048832207918167114}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3729294","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3729294","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3729294","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3729294","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3729294","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3729294","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2199664789","display_name":"CAREER: Verifying Security and Privacy of Distributed Applications","funder_award_id":"2338317","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411267729.pdf","grobid_xml":"https://content.openalex.org/works/W4411267729.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W775493447","https://openalex.org/W1537838026","https://openalex.org/W1873763122","https://openalex.org/W2008160048","https://openalex.org/W2027193703","https://openalex.org/W2042946599","https://openalex.org/W2096870293","https://openalex.org/W2097061283","https://openalex.org/W2174515752","https://openalex.org/W2295961883","https://openalex.org/W2462334487","https://openalex.org/W2487908531","https://openalex.org/W2494200839","https://openalex.org/W2565203757","https://openalex.org/W2754729435","https://openalex.org/W2884738118","https://openalex.org/W2886153332","https://openalex.org/W2889785340","https://openalex.org/W2925599298","https://openalex.org/W2963506795","https://openalex.org/W2963699739","https://openalex.org/W2980019266","https://openalex.org/W3049525043","https://openalex.org/W3093630031","https://openalex.org/W3098696637","https://openalex.org/W3100000179","https://openalex.org/W3102997142","https://openalex.org/W3104035686","https://openalex.org/W3104159150","https://openalex.org/W3108844536","https://openalex.org/W3123629616","https://openalex.org/W3145555275","https://openalex.org/W3150939926","https://openalex.org/W3156365240","https://openalex.org/W3192140144","https://openalex.org/W4205228770","https://openalex.org/W4288057781","https://openalex.org/W4300449316","https://openalex.org/W4406257889","https://openalex.org/W6775830128","https://openalex.org/W6911903915","https://openalex.org/W6930955963"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3038283795","https://openalex.org/W2604501336","https://openalex.org/W2558166297","https://openalex.org/W2734500670","https://openalex.org/W2315671126","https://openalex.org/W798507144","https://openalex.org/W2964481303"],"abstract_inverted_index":{"Differential":[0],"privacy":[1,53],"(DP)":[2],"has":[3,16,21],"become":[4],"the":[5,33,48,85,142,166,210,227],"gold":[6],"standard":[7],"for":[8,90,118,140,190],"privacy-preserving":[9],"data":[10],"analysis,":[11,254],"but":[12],"implementing":[13],"it":[14],"correctly":[15],"proven":[17],"challenging.":[18],"Prior":[19],"work":[20],"focused":[22],"on":[23],"verifying":[24],"DP":[25,77,122,167,184,192,236],"at":[26],"a":[27,39,70,109,116,137,217],"high":[28],"level,":[29],"assuming":[30],"either":[31],"that":[32,38,154,186,208,225],"foundations":[34],"are":[35],"correct":[36],"or":[37],"perfect":[40],"source":[41,72],"of":[42,51,73,93,105,114,128,145,169,212,235,245],"random":[43,65,238],"noise":[44],"is":[45,97],"available.":[46],"However,":[47],"underlying":[49],"theory":[50],"differential":[52,94],"can":[54,155,187],"be":[55,156,188],"very":[56],"complex":[57,232],"and":[58,64,111,120,124,130,149,204,215,221,237,256,261],"subtle.":[59],"Flaws":[60],"in":[61,75,99,158,252],"basic":[62],"mechanisms":[63],"number":[66,239,259],"generation":[67,144],"have":[68],"been":[69],"critical":[71],"vulnerabilities":[74],"real-world":[76,175],"systems.":[78,160],"In":[79],"this":[80],"paper,":[81],"we":[82],"present":[83],"SampCert,":[84],"first":[86],"comprehensive,":[87],"mechanized":[88,138],"foundation":[89,139,185],"executable":[91],"implementations":[92,127],"privacy.":[95],"SampCert":[96,134,241],"written":[98],"Lean":[100],"with":[101],"over":[102],"12,000":[103],"lines":[104],"proof.":[106],"It":[107],"offers":[108],"generic":[110,183],"extensible":[112],"notion":[113],"DP,":[115],"framework":[117],"constructing":[119],"composing":[121],"mechanisms,":[123],"formally":[125,200],"verified":[126,152,163,201],"Laplace":[129,203],"Gaussian":[131,205],"sampling":[132,206],"algorithms.":[133],"provides":[135],"(1)":[136,181],"developing":[141],"next":[143],"differentially":[146],"private":[147],"algorithms,":[148],"(2)":[150,199],"mechanically":[151],"primitives":[153],"deployed":[157],"production":[159],"Indeed,":[161],"SampCert\u2019s":[162,177],"algorithms":[164,207],"power":[165],"offerings":[168],"Amazon":[170],"Web":[171],"Services,":[172],"demonstrating":[173],"its":[174],"impact.":[176],"key":[178],"innovations":[179],"include:":[180],"A":[182],"instantiated":[189],"various":[191],"definitions":[193],"(e.g.,":[194],"pure,":[195],"concentrated,":[196],"R\u00e9nyi":[197],"DP);":[198],"discrete":[202],"avoid":[209],"pitfalls":[211],"floating-point":[213],"implementations;":[214],"(3)":[216],"simple":[218],"probability":[219,257],"monad":[220],"novel":[222],"proof":[223],"techniques":[224],"streamline":[226],"formalization.":[228],"To":[229],"enable":[230],"proving":[231],"correctness":[233],"properties":[234],"generation,":[240],"makes":[242],"heavy":[243],"use":[244],"Lean\u2019s":[246],"extensive":[247],"Mathlib":[248],"library,":[249],"leveraging":[250],"theorems":[251],"Fourier":[253],"measure":[255],"theory,":[258,260],"topology.":[262]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}