{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T17:00:10Z","timestamp":1784307610367,"version":"3.55.0"},"reference-count":85,"publisher":"Emerald","issue":"3-4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,8,11]]},"abstract":"<jats:p>The problem of privacy-preserving data analysis has a long history spanning multiple disciplines. As electronic data about individuals becomes increasingly detailed, and as technology enables ever more powerful collection and curation of these data, the need increases for a robust, meaningful, and mathematically rigorous definition of privacy, together with a computationally rich class of algorithms that satisfy this definition. Differential Privacy is such a definition.<\/jats:p>\n                  <jats:p>After motivating and discussing the meaning of differential privacy, the preponderance of this monograph is devoted to fundamental techniques for achieving differential privacy, and application of these techniques in creative combinations, using the query-release problem as an ongoing example. A key point is that, by rethinking the computational goal, one can often obtain far better results than would be achieved by methodically replacing each step of a non-private computation with a differentially private implementation. Despite some astonishingly powerful computational results, there are still fundamental limitations \u2014 not just on what can be achieved with differential privacy but on what can be achieved with any method that protects against a complete breakdown in privacy. Virtually all the algorithms discussed herein maintain differential privacy against adversaries of arbitrary computational power. Certain algorithms are computationally intensive, others are efficient. Computational complexity for the adversary and the algorithm are both discussed.<\/jats:p>\n                  <jats:p>We then turn from fundamentals to applications other than queryrelease, discussing differentially private methods for mechanism design and machine learning. The vast majority of the literature on differentially private algorithms considers a single, static, database that is subject to many analyses. Differential privacy in other models, including distributed databases and computations on data streams is discussed.<\/jats:p>\n                  <jats:p>Finally, we note that this work is meant as a thorough introduction to the problems and techniques of differential privacy, but is not intended to be an exhaustive survey \u2014 there is by now a vast amount of work in differential privacy, and we can cover only a small portion of it.<\/jats:p>","DOI":"10.1561\/0400000042","type":"journal-article","created":{"date-parts":[[2014,8,11]],"date-time":"2014-08-11T05:35:55Z","timestamp":1407735355000},"page":"211-487","source":"Crossref","is-referenced-by-count":3975,"title":["The Algorithmic Foundations of Differential Privacy"],"prefix":"10.1108","volume":"9","author":[{"given":"Cynthia","family":"Dwork","sequence":"first","affiliation":[{"name":"Microsoft Research ,","place":["USA"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aaron","family":"Roth","sequence":"additional","affiliation":[{"name":"University of Pennsylvania ,","place":["USA"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"140","published-online":{"date-parts":[[2014,8,11]]},"reference":[{"issue":"1","key":"2026040314243422000_ref001","doi-asserted-by":"crossref","first-page":"121","DOI":"10.4086\/toc.2012.v008a006","article-title":"The multiplicative weights update method: A meta-algorithm and applications","volume":"8","author":"Arora","year":"2012","journal-title":"Theory of Computing"},{"key":"2026040314243422000_ref002","first-page":"605","article-title":"Mechanism design via machine learning","author":"Balcan","year":"2005","journal-title":"Foundations of Computer Science, 2005. FOCS 2005. 46th Annual IEEE Symposium on"},{"key":"2026040314243422000_ref003","first-page":"437","article-title":"Bounds on the sample complexity for private learning and private data release","author":"Beimel","year":"2010","journal-title":"Theory of Cryptography"},{"key":"2026040314243422000_ref004","first-page":"97","article-title":"Characterizing the sample complexity of private learners","author":"Beimel","year":"2013","journal-title":"Proceedings of the Conference on Innovations in Theoretical Computer Science"},{"key":"2026040314243422000_ref005","first-page":"1269","article-title":"Unconditional differentially private mechanisms for linear queries","author":"Bhaskara","year":"2012","journal-title":"Proceedings of the Symposium on Theory of Computing Conference, Symposium on Theory of Computing, New York, NY, USA, May 19-22, 2012"},{"key":"2026040314243422000_ref006","first-page":"128","article-title":"Practical privacy: the SuLQ framework","author":"Blum","year":"2005","journal-title":"Principles of Database Systems"},{"key":"2026040314243422000_ref007","article-title":"Practical privacy: the sulq framework","author":"Blum","journal-title":"Principles of Database Systems"},{"key":"2026040314243422000_ref008","doi-asserted-by":"crossref","first-page":"609","DOI":"10.1145\/1374376.1374464","article-title":"A learning theory approach to noninteractive database privacy","author":"Blum","year":"2008","journal-title":"Symposium on Theory of Computing"},{"key":"2026040314243422000_ref009","author":"Blum","year":"2007","journal-title":"Learning, regret minimization, and equilibria"},{"key":"2026040314243422000_ref010","author":"Casti","journal-title":"Five Golden Rules: Great Theories of 20th-Century Mathematics and Why They Matter"},{"key":"2026040314243422000_ref011","doi-asserted-by":"crossref","first-page":"405","DOI":"10.1007\/978-3-642-14162-1_34","article-title":"Private and continual release of statistics","author":"Hubert","year":"2010","journal-title":"Automata, Languages and Programming"},{"key":"2026040314243422000_ref012","article-title":"Sample complexity bounds for differentially private learning","author":"Chaudhuri","journal-title":"Proceedings of the Annual Conference on Learning Theory (COLT 2011)"},{"key":"2026040314243422000_ref013","article-title":"Differentially private empirical risk minimization","author":"Chaudhuri","journal-title":"Journal of machine learning research: JMLR"},{"key":"2026040314243422000_ref014","first-page":"998","article-title":"Near-optimal differentially private principal components","author":"Chaudhuri","year":"2012","journal-title":"Advances in Neural Information Processing Systems 25"},{"key":"2026040314243422000_ref015","article-title":"Truthful mechanisms for agents that value privacy","author":"Chen","year":"2013","journal-title":"Association for Computing Machinery Conference on Electronic Commerce"},{"key":"2026040314243422000_ref016","doi-asserted-by":"crossref","first-page":"309","DOI":"10.1007\/978-3-642-35311-6_23","article-title":"Privacy auctions for recommender systems","author":"Dandekar","year":"2012","journal-title":"Internet and Network Economics"},{"key":"2026040314243422000_ref017","first-page":"321","article-title":"Lower bounds in differential privacy","author":"De","year":"2012","journal-title":"Theory of Cryptography Conference"},{"key":"2026040314243422000_ref018","first-page":"202","article-title":"Revealing information while preserving privacy","author":"Dinur","year":"2003","journal-title":"Proceedings of the Association for Computing Machinery SIGACT- SIGMOD-SIGART Symposium on Principles of Database Systems"},{"key":"2026040314243422000_ref019","article-title":"Local privacy and statistical minimax rates","author":"Duchi","year":"2013","journal-title":"arXiv preprint arXiv:1302.3203"},{"key":"2026040314243422000_ref020","first-page":"1","article-title":"Differential privacy","author":"Dwork","year":"2006","journal-title":"Proceedings of the International Colloquium on Automata, Languages and Programming (ICALP)(2)"},{"key":"2026040314243422000_ref021","first-page":"486","article-title":"Our data, ourselves: Privacy via distributed noise generation","author":"Dwork","year":"2006","journal-title":"EUROCRYPT"},{"key":"2026040314243422000_ref022","article-title":"Differential privacy and robust statistics","author":"Dwork","journal-title":"Proceedings of the 2009 International Association for Computing Machinery Symposium on Theory of Computing (STOC)"},{"key":"2026040314243422000_ref023","first-page":"265","article-title":"Calibrating noise to sensitivity in private data analysis","author":"Dwork","year":"2006","journal-title":"Theory of Cryptography Conference \u201906"},{"key":"2026040314243422000_ref024","first-page":"85","article-title":"The price of privacy and the limits of lp decoding","author":"Dwork","year":"2007","journal-title":"Proceedings of the Association for Computing Machinery Symposium on Theory of Computing"},{"key":"2026040314243422000_ref025","doi-asserted-by":"crossref","DOI":"10.29012\/jpc.v2i1.585","article-title":"On the difficulties of disclosure prevention in statistical databases or the case for differential privacy","author":"Dwork","year":"2010","journal-title":"Journal of Privacy and Confidentiality"},{"key":"2026040314243422000_ref026","first-page":"715","article-title":"Differential privacy under continual observation","author":"Dwork","year":"2010","journal-title":"Proceedings of the Association for Computing Machinery Symposium on Theory of Computing"},{"key":"2026040314243422000_ref027","article-title":"Pan-private streaming algorithms","author":"Dwork","journal-title":"Proceedings of International Conference on Super Computing"},{"key":"2026040314243422000_ref028","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1145\/1536414.1536467","article-title":"On the complexity of differentially private data release: Efficient algorithms and hardness results","author":"Dwork","year":"2009","journal-title":"Symposium on Theory of Computing \u201909"},{"key":"2026040314243422000_ref029","article-title":"The privacy of the analyst and the power of the state","author":"Dwork","journal-title":"Foundations of Computer Science"},{"key":"2026040314243422000_ref030","article-title":"Efficient algorithms for privately releasing marginals via convex relaxations","author":"Dwork","journal-title":"Proceedings of the Annual Symposium on Computational Geometry (SoCG)"},{"key":"2026040314243422000_ref031","doi-asserted-by":"crossref","first-page":"528","DOI":"10.1007\/978-3-540-28628-8_32","article-title":"Privacy-preserving datamining on vertically partitioned databases","volume":"3152","author":"Dwork","year":"2004","journal-title":"Proceedings of Cryptology 2004"},{"key":"2026040314243422000_ref032","first-page":"51","article-title":"Boosting and differential privacy","author":"Dwork","year":"2010","journal-title":"Foundations of Computer Science"},{"key":"2026040314243422000_ref033","article-title":"Analyze gauss: Optimal bounds for privacy-preserving pca","author":"Dwork","journal-title":"Symposium on Theory of Computing"},{"key":"2026040314243422000_ref034","first-page":"568","article-title":"Approximately optimal auctions for selling privacy when costs are correlated with data","author":"Fleischer","year":"2012","journal-title":"Association for Computing Machinery Conference on Electronic Commerce"},{"key":"2026040314243422000_ref035","doi-asserted-by":"crossref","first-page":"543","DOI":"10.1145\/2482540.2482585","article-title":"Privacy and coordination: Computing on databases with endogenous participation","author":"Ghosh","year":"2013","journal-title":"Proceedings of the fourteenth ACM conference on Electronic commerce (EC)"},{"key":"2026040314243422000_ref036","article-title":"Selling privacy at auction","author":"Ghosh","journal-title":"Association for Computing Machinery Conference on Electronic Commerce"},{"key":"2026040314243422000_ref037","article-title":"Limits of computational differential privacy in the client\/server setting","author":"Groce","journal-title":"Proceedings of the Theory of Cryptography Conference"},{"key":"2026040314243422000_ref038","first-page":"803","article-title":"Privately releasing conjunctions and the statistical query barrier","author":"Gupta","year":"2011","journal-title":"Symposium on Theory of Computing \u201911"},{"key":"2026040314243422000_ref039","first-page":"339","article-title":"Iterative constructions and private data release","author":"Gupta","year":"2012","journal-title":"Theory of Cryptography Conference"},{"key":"2026040314243422000_ref040","article-title":"A pseudorandom generator from any one-way function","author":"Hastad","journal-title":"SIAM Journal of Computing"},{"key":"2026040314243422000_ref041","first-page":"2348","article-title":"A simple and practical algorithm for differentially private data release","author":"Hardt","year":"2012","journal-title":"Advances in Neural Information Processing Systems 25"},{"key":"2026040314243422000_ref042","doi-asserted-by":"crossref","first-page":"1255","DOI":"10.1145\/2213977.2214088","article-title":"Beating randomized response on incoherent matrices","author":"Hardt","year":"2012","journal-title":"Proceedings of the Symposium on Theory of Computing"},{"key":"2026040314243422000_ref043","article-title":"Beyond worst-case analysis in private singular vector computation","author":"Hardt","journal-title":"Proceedings of the Symposium on Theory of Computing"},{"key":"2026040314243422000_ref044","first-page":"61","article-title":"A multiplicative weights mechanism for privacy-preserving data analysis","author":"Hardt","year":"2010","journal-title":"Foundations of Computer Science"},{"key":"2026040314243422000_ref045","first-page":"705","article-title":"On the geometry of differential privacy","author":"Hardt","year":"2010","journal-title":"Proceedings of the Association for Computing Machinery Symposium on Theory of Computing"},{"key":"2026040314243422000_ref046","article-title":"Resolving individuals contributing trace amounts of dna to highly complex mixtures using high- density snp genotyping microarrays","author":"Homer","journal-title":"PLoS Genet"},{"key":"2026040314243422000_ref047","first-page":"1311","volume":"arXiv","author":"Hsu","year":"2013"},{"key":"2026040314243422000_ref048","first-page":"341","article-title":"Differential privacy for the analyst via private equilibrium computation","author":"Hsu","year":"2013","journal-title":"Proceedings of the Association for Computing Machinery Symposium on Theory of Computing (STOC)"},{"key":"2026040314243422000_ref049","first-page":"140","article-title":"The exponential mechanism for so cial welfare: Private, truthful, and nearly optimal","author":"Huang","year":"2012","journal-title":"IEEE Annual Symposium on the Foundations of Computer Science (FOCS)"},{"key":"2026040314243422000_ref050","article-title":"Differentially private online learning","author":"Jain","journal-title":"Journal of Machine Learning Research \u2014 Proceedings Track"},{"key":"2026040314243422000_ref051","doi-asserted-by":"crossref","article-title":"On differentially private low rank approximation","author":"Kapralov","DOI":"10.1137\/1.9781611973105.101"},{"key":"2026040314243422000_ref052","author":"Kasiviswanathan"},{"issue":"6","key":"2026040314243422000_ref053","doi-asserted-by":"crossref","first-page":"983","DOI":"10.1145\/293347.293351","article-title":"Efficient noise-tolerant learning from statistical queries","volume":"45","author":"Kearns","year":"1998","journal-title":"Journal of the Association for Computing Machinery (JAssociation for Computing Machinery)"},{"key":"2026040314243422000_ref054","article-title":"Mechanism design in large games: Incentives and privacy","author":"Kearns","year":"2014","journal-title":"Proceedings of the 5th conference on Innovations in theoretical computer science (ITCS)"},{"key":"2026040314243422000_ref055","article-title":"Private convex empirical risk minimization and high-dimensional regression","author":"Kifer","journal-title":"Journal of Machine Learning Research"},{"key":"2026040314243422000_ref056","doi-asserted-by":"crossref","first-page":"378","DOI":"10.1007\/978-3-642-35311-6_28","article-title":"Take it or leave it: Running a survey when privacy comes at a cost","author":"Ligett","year":"2012","journal-title":"Internet and Network Economics"},{"key":"2026040314243422000_ref057","first-page":"256","article-title":"The weighted majority algorithm","author":"Littlestone","year":"1989","journal-title":"Annual Symposium on Foundations of Computer Science, 1989"},{"key":"2026040314243422000_ref058","first-page":"81","article-title":"The limits of two-party differential privacy","author":"McGregor","year":"2010","journal-title":"Foundations of Computer Science"},{"key":"2026040314243422000_ref059","article-title":"Privacy integrated queries (codebase)","author":"McSherry"},{"key":"2026040314243422000_ref060","first-page":"94","article-title":"Mechanism design via differential privacy","author":"McSherry","year":"2007","journal-title":"Foundations of Computer Science"},{"key":"2026040314243422000_ref061","first-page":"94","article-title":"Mechanism design via differential privacy","author":"McSherry","year":"2007","journal-title":"Foundations of Computer Science"},{"key":"2026040314243422000_ref062","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1145\/1989284.1989290","article-title":"Pan-private algorithms via statistics on sketches","author":"Mir","year":"2011","journal-title":"Proceedings of the Association for Computing Machinery SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems"},{"key":"2026040314243422000_ref063","doi-asserted-by":"crossref","article-title":"On significance of the least significant bits for differential privacy","author":"Mironov","DOI":"10.1145\/2382196.2382264"},{"key":"2026040314243422000_ref064","first-page":"126","article-title":"Computational differential privacy","author":"Mironov","year":"2009","journal-title":"Proceedings of CRYPTOLOGY"},{"key":"2026040314243422000_ref065","article-title":"Robust de-anonymization of large sparse datasets (how to break anonymity of the netflix prize dataset)","author":"Narayanan","journal-title":"Proceedings of IEEE Symposium on Security and Privacy"},{"key":"2026040314243422000_ref066","article-title":"The geometry of differential privacy: the sparse and approximate cases","author":"Nikolov","year":"2013","journal-title":"Symposium on Theory of Computing"},{"key":"2026040314243422000_ref067","first-page":"774","article-title":"Privacy-aware mechanism design","author":"Nissim","year":"2012","journal-title":"Association for Computing Machinery Conference on Electronic Commerce"},{"key":"2026040314243422000_ref068","first-page":"75","article-title":"Smooth sensitivity and sampling in private data analysis","author":"Nissim","year":"2007","journal-title":"Proceedings of the Association for Computing Machinery Symposium on Theory of Computing"},{"key":"2026040314243422000_ref069","doi-asserted-by":"crossref","first-page":"203","DOI":"10.1145\/2090236.2090254","article-title":"Approximately optimal mechanism design via differential privacy","author":"Nissim","year":"2012","journal-title":"Innovations in Theoretical Computer Science"},{"key":"2026040314243422000_ref070","doi-asserted-by":"crossref","DOI":"10.1145\/2509013.2509016","article-title":"Privacy and mechanism design","author":"Pai","year":"2013","journal-title":"SIGecom Exchanges"},{"key":"2026040314243422000_ref071","first-page":"1311","volume":"arXiv","author":"Rogers","year":"2013"},{"key":"2026040314243422000_ref072","doi-asserted-by":"crossref","first-page":"683","DOI":"10.1007\/978-3-642-15369-3_51","article-title":"Differential privacy and the fat-shattering dimension of linear queries","author":"Roth","year":"2010","journal-title":"Approximation, Randomization, and Combinatorial Optimization, Algorithms and Techniques"},{"issue":"1","key":"2026040314243422000_ref073","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2325713.2325714","article-title":"Buying private data at auction: the sensitive surveyor\u2019s problem","volume":"11","author":"Roth","year":"2012","journal-title":"Association for Computing Machinery SIGecom Exchanges"},{"key":"2026040314243422000_ref074","first-page":"765","article-title":"Interactive privacy via the median mechanism","author":"Roth","year":"2010","journal-title":"Symposium on Theory of Computing \u201910"},{"key":"2026040314243422000_ref075","article-title":"Conducting truthful surveys, cheaply","author":"Roth","journal-title":"Proceedings of the ACM Conference on Electronic Commerce"},{"key":"2026040314243422000_ref076","first-page":"0911","volume":"arXiv","author":"Rubinstein","year":"2009"},{"key":"2026040314243422000_ref077","doi-asserted-by":"crossref","DOI":"10.1007\/978-0-387-21579-2_9","article-title":"The boosting approach to machine learning: An overview","author":"Schapire","year":"2003"},{"key":"2026040314243422000_ref078","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1023\/A:1007614523901","article-title":"Improved boosting algorithms using confidence-rated predictions","volume":"39","author":"Schapire","year":"1999","journal-title":"Machine Learning"},{"key":"2026040314243422000_ref079","author":"Schapire","journal-title":"Boosting: Foundations and Algorithms"},{"key":"2026040314243422000_ref080","article-title":"Differentially private feature selection via stability arguments, and the robustness of the lasso","author":"Smith","journal-title":"Proceedings of Conference on Learning Theory"},{"key":"2026040314243422000_ref081","doi-asserted-by":"crossref","first-page":"98","DOI":"10.1111\/j.1748-720X.1997.tb01885.x","article-title":"Weaving technology and policy together to maintain confidentiality","volume":"25","author":"Sweeney","year":"1997","journal-title":"Journal of Law, Medicines Ethics"},{"key":"2026040314243422000_ref082","first-page":"361","article-title":"Answering n{2+o(1)} counting queries with differential privacy is hard","author":"Ullman","year":"2013","journal-title":"Symposium on Theory of Computing"},{"issue":"11","key":"2026040314243422000_ref083","doi-asserted-by":"crossref","first-page":"1134","DOI":"10.1145\/1968.1972","article-title":"A theory of the learnable","volume":"27","author":"Valiant","year":"1984","journal-title":"Communications of the Association for Computing Machinery"},{"issue":"309","key":"2026040314243422000_ref084","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1080\/01621459.1965.10480775","article-title":"Randomized response: A survey technique for eliminating evasive answer bias","volume":"60","author":"Warner","year":"1965","journal-title":"Journal of the American Statistical Association"},{"key":"2026040314243422000_ref085","first-page":"67","article-title":"Is privacy compatible with truthfulness","author":"Xiao","year":"2013","journal-title":"Proceedings of the Conference on Innovations in Theoretical Computer Science"}],"container-title":["Foundations and Trends\u00ae in Theoretical Computer Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.emerald.com\/fttcs\/article-pdf\/9\/3-4\/211\/11486280\/0400000042en.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/www.emerald.com\/fttcs\/article-pdf\/9\/3-4\/211\/11486280\/0400000042en.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:01:15Z","timestamp":1777489275000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.emerald.com\/fttcs\/article\/9\/3-4\/211\/1332491\/The-Algorithmic-Foundations-of-Differential"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,8,11]]},"references-count":85,"journal-issue":{"issue":"3-4","published-print":{"date-parts":[[2014,8,11]]}},"URL":"https:\/\/doi.org\/10.1561\/0400000042","relation":{},"ISSN":["1551-305X","1551-3068"],"issn-type":[{"value":"1551-305X","type":"print"},{"value":"1551-3068","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,8,11]]}}}