{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T05:19:21Z","timestamp":1782623961154,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":61,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006374","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/Y037421\/1 and EP\/X040518\/1"],"award-info":[{"award-number":["EP\/Y037421\/1 and EP\/X040518\/1"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"name":"PETRAS National Centre of Excellence for IoT Systems Cybersecurity","award":["EP\/S035362\/1"],"award-info":[{"award-number":["EP\/S035362\/1"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690272","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"3451-3465","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["QueryCheetah: Fast Automated Discovery of Attribute Inference Attacks Against Query-Based Systems"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1731-7349","authenticated-orcid":false,"given":"Bozhidar","family":"Stevanoski","sequence":"first","affiliation":[{"name":"Imperial College London, London, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9009-7381","authenticated-orcid":false,"given":"Ana-Maria","family":"Cretu","sequence":"additional","affiliation":[{"name":"EPFL, Lausanne, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2559-5616","authenticated-orcid":false,"given":"Yves-Alexandre","family":"de Montjoye","sequence":"additional","affiliation":[{"name":"Imperial College London, London, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"About customer list custom audiences. https:\/\/www.facebook.com\/business\/he lp\/341425252616329. [Accessed 06-02--2024]."},{"key":"e_1_3_2_1_2_1","unstructured":"Aircloak vulnerabilities. https:\/\/aircloak.com\/security\/#anchor-diffix-vulnerabil ities. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_3_1","unstructured":"Attack Challenge | Aircloak. https:\/\/aircloak.com\/solutions\/attack-challenge-en\/. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_4_1","unstructured":"Data Collaboration Service - AWS Clean Rooms - AWS. https:\/\/aws.amazon.c om\/clean-rooms\/. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_5_1","unstructured":"Google Maps 101: How AI helps predict traffic and determine routes. https: \/\/blog.google\/products\/maps\/google-maps-101-how-ai-helps-predict-trafficand-determine-routes\/. [Accessed 02-02--2024]."},{"key":"e_1_3_2_1_6_1","unstructured":"OpenSAFELY: Secure analytics platform for NHS electronic health records. https: \/\/www.opensafely.org\/. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_7_1","unstructured":"Strava Metro Home. https:\/\/metro.strava.com\/. [Accessed 02-02--2024]."},{"key":"e_1_3_2_1_8_1","unstructured":"Uber Newsroom. https:\/\/www.uber.com\/newsroom\/introducing- ubermovement-2\/. [Accessed 06-02--2024]."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.24432\/C5N30T"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3226070"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jmva.2019.104536"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1051\/0004-6361\/201525830"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2015.071829"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833677"},{"key":"e_1_3_2_1_15_1","unstructured":"Felix Bauer. The World's Only Anonymization Bug Bounty -- Round Two! - Aircloak. https:\/\/aircloak.com\/the-worlds-only-anonymization-bug-bountyround-two\/. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.24432\/C5XW20"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243863"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00081"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484751"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2013.11.024"},{"key":"e_1_3_2_1_22_1","volume-title":"Fiona AC Polack, and Philip James Mourdjis. A multi-arm bandit neighbourhood search for routing and scheduling problems.","author":"Chen Yujie","year":"2016","unstructured":"Yujie Chen, Peter Ivan Cowling, Fiona AC Polack, and Philip James Mourdjis. A multi-arm bandit neighbourhood search for routing and scheduling problems. 2016."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-022-04996-4"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.3233\/SJI-160969"},{"key":"e_1_3_2_1_25_1","volume-title":"Linear program reconstruction in practice. arXiv:1810.05692","author":"Cohen Aloni","year":"2018","unstructured":"Aloni Cohen and Kobbi Nissim. Linear program reconstruction in practice. arXiv:1810.05692, 2018."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560581"},{"key":"e_1_3_2_1_27_1","volume-title":"The tracker: A threat to statistical database security. ACM Transactions on Database Systems (TODS), 4(1):76--96","author":"Denning Dorothy E","year":"1979","unstructured":"Dorothy E Denning and Peter J Denning. The tracker: A threat to statistical database security. ACM Transactions on Database Systems (TODS), 4(1):76--96, 1979."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243818"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/773153.773173"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250790.1250804"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/FOCS.2015.46"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85174-5_26"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1972.10481199"},{"key":"e_1_3_2_1_35_1","unstructured":"Paul Francis. Specification of diffix cedar. Technical report Technical Report MPI-SWS-2020-006 MPI-SWS 2020."},{"key":"e_1_3_2_1_36_1","volume-title":"Specification of Diffix Dogwood","author":"Francis Paul","year":"2021","unstructured":"Paul Francis. Specification of Diffix Dogwood. 2021."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67280-9_8"},{"key":"e_1_3_2_1_38_1","volume-title":"Diffix-birch: Extending diffix-aspen. arXiv:1806.02075","author":"Francis Paul","year":"2018","unstructured":"Paul Francis, Sebastian Probst-Eide, Pawel Obrok, Cristian Berneanu, Sasa Juric, and Reinhard Munz. Diffix-birch: Extending diffix-aspen. arXiv:1806.02075, 2018."},{"key":"e_1_3_2_1_39_1","volume-title":"Diffix elm: Simple diffix. arXiv:2201.04351","author":"Francis Paul","year":"2022","unstructured":"Paul Francis, Sebastian Probst-Eide, David Wagner, Felix Bauer, Cristian Berneanu, and Edon Gashi. Diffix elm: Simple diffix. arXiv:2201.04351, 2022."},{"key":"e_1_3_2_1_40_1","first-page":"1081","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Gadotti Andrea","year":"2019","unstructured":"Andrea Gadotti, Florimond Houssiau, Luc Rocher, Benjamin Livshits, and YvesAlexandre De Montjoye. When the signal is in the noise: Exploiting diffix's sticky noise. In 28th USENIX Security Symposium (USENIX Security 19), pages 1081--1098, 2019."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pgen.1000167"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-021-27566-0"},{"key":"e_1_3_2_1_44_1","first-page":"22205","article-title":"Auditing differentially private machine learning: How private is private sgd?","volume":"33","author":"Jagielski Matthew","year":"2020","unstructured":"Matthew Jagielski, Jonathan Ullman, and Alina Oprea. Auditing differentially private machine learning: How private is private sgd? Advances in Neural Information Processing Systems, 33:22205--22216, 2020.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006389"},{"key":"e_1_3_2_1_46_1","volume-title":"Table builder problem-confidentiality for linked tables","author":"O'Keefe Christine M","year":"2008","unstructured":"Christine M O'Keefe, Stephen Haslett, David Steel, and Ray Chambers. Table builder problem-confidentiality for linked tables. 2008."},{"key":"e_1_3_2_1_47_1","unstructured":"Differential Privacy. Reconstruction Attacks in Practice. https:\/\/differentialpriva cy.org\/diffix-attack\/. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.24432\/C5630S"},{"key":"e_1_3_2_1_49_1","unstructured":"Apostolos Pyrgelis. On Location Time and Membership: Studying How Aggregate Location Data Can Harm Users? Privacy. https:\/\/www.benthamsgaze.o rg\/2018\/10\/02\/on-location- time-and-membership-studying-how-aggregatelocation-data-can-harm-users-privacy\/. [Accessed 01-02--2024]."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23183"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1214\/17-STS641"},{"key":"e_1_3_2_1_52_1","volume-title":"Koray Mancuhan, Akash Kaura, Nikhil Gahlawat, Neha Jain, Paul Ko, and Parvez Ahammad. A members first approach to enabling linkedin's labor market insights at scale. arXiv:2010.13981","author":"Rogers Ryan","year":"2020","unstructured":"Ryan Rogers, Adrian Rivera Cardoso, Koray Mancuhan, Akash Kaura, Nikhil Gahlawat, Neha Jain, Paul Ko, and Parvez Ahammad. A members first approach to enabling linkedin's labor market insights at scale. arXiv:2010.13981, 2020."},{"key":"e_1_3_2_1_53_1","volume-title":"Shraddha Sahay, and Parvez Ahammad. Linkedin's audience engagements api: A privacy preserving data analytics system at scale. arXiv:2002.05839","author":"Rogers Ryan","year":"2020","unstructured":"Ryan Rogers, Subbu Subramaniam, Sean Peng, David Durfee, Seunghyun Lee, Santosh Kumar Kancha, Shraddha Sahay, and Parvez Ahammad. Linkedin's audience engagements api: A privacy preserving data analytics system at scale. arXiv:2002.05839, 2020."},{"key":"e_1_3_2_1_54_1","first-page":"297","volume-title":"NSDI","volume":"10","author":"Roy Indrajit","year":"2010","unstructured":"Indrajit Roy, Srinath TV Setty, Ann Kilzer, Vitaly Shmatikov, and Emmett Witchel. Airavat: Security and privacy for mapreduce. In NSDI, volume 10, pages 297--312, 2010."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/CTS.2013.6567202"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1080\/14786445008521796"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_1_58_1","first-page":"1451","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Stadler Theresa","year":"2022","unstructured":"Theresa Stadler, Bristena Oprisanu, and Carmela Troncoso. Synthetic data-- anonymisation groundhog day. In 31st USENIX Security Symposium (USENIX Security 22), pages 1451--1468, 2022."},{"key":"e_1_3_2_1_59_1","volume-title":"et al. Llama: Open and efficient foundation language models. arXiv:2302.13971","author":"Touvron Hugo","year":"2023","unstructured":"Hugo Touvron, Thibaut Lavril, Gautier Izacard, Xavier Martinet, Marie-Anne Lachaux, Timoth\u00e9e Lacroix, Baptiste Rozi\u00e8re, Naman Goyal, Eric Hambro, Faisal Azhar, et al. Llama: Open and efficient foundation language models. arXiv:2302.13971, 2023."},{"key":"e_1_3_2_1_60_1","volume-title":"Debugging differential privacy: A case study for privacy auditing. arXiv:2202.12219","author":"Tramer Florian","year":"2022","unstructured":"Florian Tramer, Andreas Terzis, Thomas Steinke, Shuang Song, Matthew Jagielski, and Nicholas Carlini. Debugging differential privacy: A case study for privacy auditing. arXiv:2202.12219, 2022."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417282"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690272","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690272","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:18:56Z","timestamp":1755843536000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690272"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":61,"alternative-id":["10.1145\/3658644.3690272","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690272","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}