slides09.tex
changeset 83 161ec08d70f8
parent 82 01562d143105
child 84 6334bb9143bc
equal deleted inserted replaced
82:01562d143105 83:161ec08d70f8
       
     1 \documentclass[dvipsnames,14pt,t]{beamer}
       
     2 \usepackage{proof}
       
     3 \usepackage{beamerthemeplainculight}
       
     4 \usepackage[T1]{fontenc}
       
     5 \usepackage[latin1]{inputenc}
       
     6 \usepackage{mathpartir}
       
     7 \usepackage{isabelle}
       
     8 \usepackage{isabellesym}
       
     9 \usepackage[absolute,overlay]{textpos}
       
    10 \usepackage{ifthen}
       
    11 \usepackage{tikz}
       
    12 \usepackage{courier}
       
    13 \usepackage{listings}
       
    14 \usetikzlibrary{arrows}
       
    15 \usetikzlibrary{positioning}
       
    16 \usetikzlibrary{calc}
       
    17 \usepackage{graphicx} 
       
    18 \usetikzlibrary{shapes}
       
    19 \usetikzlibrary{shadows}
       
    20 \usetikzlibrary{plotmarks}
       
    21 
       
    22 
       
    23 \isabellestyle{rm}
       
    24 \renewcommand{\isastyle}{\rm}%
       
    25 \renewcommand{\isastyleminor}{\rm}%
       
    26 \renewcommand{\isastylescript}{\footnotesize\rm\slshape}%
       
    27 \renewcommand{\isatagproof}{}
       
    28 \renewcommand{\endisatagproof}{}
       
    29 \renewcommand{\isamarkupcmt}[1]{#1}
       
    30 
       
    31 % Isabelle characters
       
    32 \renewcommand{\isacharunderscore}{\_}
       
    33 \renewcommand{\isacharbar}{\isamath{\mid}}
       
    34 \renewcommand{\isasymiota}{}
       
    35 \renewcommand{\isacharbraceleft}{\{}
       
    36 \renewcommand{\isacharbraceright}{\}}
       
    37 \renewcommand{\isacharless}{$\langle$}
       
    38 \renewcommand{\isachargreater}{$\rangle$}
       
    39 \renewcommand{\isasymsharp}{\isamath{\#}}
       
    40 \renewcommand{\isasymdots}{\isamath{...}}
       
    41 \renewcommand{\isasymbullet}{\act}
       
    42 
       
    43 
       
    44 
       
    45 \definecolor{javared}{rgb}{0.6,0,0} % for strings
       
    46 \definecolor{javagreen}{rgb}{0.25,0.5,0.35} % comments
       
    47 \definecolor{javapurple}{rgb}{0.5,0,0.35} % keywords
       
    48 \definecolor{javadocblue}{rgb}{0.25,0.35,0.75} % javadoc
       
    49 
       
    50 \lstset{language=Java,
       
    51 	basicstyle=\ttfamily,
       
    52 	keywordstyle=\color{javapurple}\bfseries,
       
    53 	stringstyle=\color{javagreen},
       
    54 	commentstyle=\color{javagreen},
       
    55 	morecomment=[s][\color{javadocblue}]{/**}{*/},
       
    56 	numbers=left,
       
    57 	numberstyle=\tiny\color{black},
       
    58 	stepnumber=1,
       
    59 	numbersep=10pt,
       
    60 	tabsize=2,
       
    61 	showspaces=false,
       
    62 	showstringspaces=false}
       
    63 
       
    64 \lstdefinelanguage{scala}{
       
    65   morekeywords={abstract,case,catch,class,def,%
       
    66     do,else,extends,false,final,finally,%
       
    67     for,if,implicit,import,match,mixin,%
       
    68     new,null,object,override,package,%
       
    69     private,protected,requires,return,sealed,%
       
    70     super,this,throw,trait,true,try,%
       
    71     type,val,var,while,with,yield},
       
    72   otherkeywords={=>,<-,<\%,<:,>:,\#,@},
       
    73   sensitive=true,
       
    74   morecomment=[l]{//},
       
    75   morecomment=[n]{/*}{*/},
       
    76   morestring=[b]",
       
    77   morestring=[b]',
       
    78   morestring=[b]"""
       
    79 }
       
    80 
       
    81 \lstset{language=Scala,
       
    82 	basicstyle=\ttfamily,
       
    83 	keywordstyle=\color{javapurple}\bfseries,
       
    84 	stringstyle=\color{javagreen},
       
    85 	commentstyle=\color{javagreen},
       
    86 	morecomment=[s][\color{javadocblue}]{/**}{*/},
       
    87 	numbers=left,
       
    88 	numberstyle=\tiny\color{black},
       
    89 	stepnumber=1,
       
    90 	numbersep=10pt,
       
    91 	tabsize=2,
       
    92 	showspaces=false,
       
    93 	showstringspaces=false}
       
    94 
       
    95 % beamer stuff 
       
    96 \renewcommand{\slidecaption}{APP 09, King's College London, 27 November 2012}
       
    97 \newcommand{\dn}{\stackrel{\mbox{\scriptsize def}}{=}}% for definitions
       
    98 \newcommand{\bl}[1]{\textcolor{blue}{#1}}
       
    99 
       
   100 \begin{document}
       
   101 
       
   102 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   103 \mode<presentation>{
       
   104 \begin{frame}<1>[t]
       
   105 \frametitle{%
       
   106   \begin{tabular}{@ {}c@ {}}
       
   107   \\
       
   108   \LARGE Access Control and \\[-3mm] 
       
   109   \LARGE Privacy Policies (9)\\[-6mm] 
       
   110   \end{tabular}}\bigskip\bigskip\bigskip
       
   111 
       
   112   %\begin{center}
       
   113   %\includegraphics[scale=1.3]{pics/barrier.jpg}
       
   114   %\end{center}
       
   115 
       
   116 \normalsize
       
   117   \begin{center}
       
   118   \begin{tabular}{ll}
       
   119   Email:  & christian.urban at kcl.ac.uk\\
       
   120   Of$\!$fice: & S1.27 (1st floor Strand Building)\\
       
   121   Slides: & KEATS (also homework is there)\\
       
   122   \end{tabular}
       
   123   \end{center}
       
   124 
       
   125 \end{frame}}
       
   126  %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%     
       
   127 
       
   128 
       
   129 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   130 \mode<presentation>{
       
   131 \begin{frame}[c]
       
   132 \frametitle{Last Week}
       
   133 
       
   134 Recall, the Schroeder-Needham (1978) protocol is vulnerable to replay attacks.
       
   135 
       
   136 \begin{center}
       
   137 \begin{tabular}{@{}r@ {\hspace{1mm}}l@{}}
       
   138 \bl{$A \rightarrow S :$} & \bl{$A, B, N_A$}\\
       
   139 \bl{$S \rightarrow A :$} & \bl{$\{N_A, B, K_{AB},\{K_{AB}, A\}_{K_{BS}} \}_{K_{AS}}$}\\
       
   140 \bl{$A \rightarrow B :$} & \bl{$\{K_{AB}, A\}_{K_{BS}} $}\\
       
   141 \bl{$B \rightarrow A :$} & \bl{$\{N_B\}_{K_{AB}}$}\\
       
   142 \bl{$A \rightarrow B :$} & \bl{$\{N_B-1\}_{K_{AB}}$}\\
       
   143 \end{tabular}
       
   144 \end{center}\pause
       
   145 
       
   146 Fix: Replace messages 2 and 3 to include a timestamp:\bigskip
       
   147 
       
   148 \begin{minipage}{1.1\textwidth}
       
   149 \begin{center}
       
   150 \begin{tabular}{@{\hspace{-2mm}}r@ {\hspace{1mm}}l@{}}
       
   151 \bl{$S \rightarrow A :$} & \bl{$\{N_A, B, K_{\!AB}, T_S, \!\{K_{\!AB}, A, T_S\}_{K_{BS}} \}_{K_{AS}}$}\\
       
   152 \bl{$A \rightarrow B :$} & \bl{$\{K_{AB}, A, T_S\}_{K_{BS}} $}\\
       
   153 \end{tabular}
       
   154 \end{center}
       
   155 \end{minipage}
       
   156 
       
   157 \end{frame}}
       
   158 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
       
   159 
       
   160 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   161 \mode<presentation>{
       
   162 \begin{frame}[t]
       
   163 \frametitle{Denning-Sacco Protocol}
       
   164 
       
   165 Denning-Sacco (1981) suggested to add the timestamp, but omit the handshake:\bigskip
       
   166 
       
   167 \begin{minipage}{1.1\textwidth}
       
   168 \begin{center}
       
   169 \begin{tabular}{@{\hspace{-2mm}}r@ {\hspace{1mm}}l@{}}
       
   170 \bl{$A \rightarrow S :$} & \bl{$A, B, N_A$}\\
       
   171 \bl{$S \rightarrow A :$} & \bl{$\{N_A, B, K_{\!AB}, T_S, \!\{K_{\!AB}, A, T_S\}_{K_{BS}} \}_{K_{AS}}$}\\
       
   172 \bl{$A \rightarrow B :$} & \bl{$\{K_{AB}, A, T_S\}_{K_{BS}} $}\\
       
   173 \textcolor{lightgray}{$B \rightarrow A :$} & \textcolor{lightgray}{$\{N_B\}_{K_{AB}}$}\\
       
   174 \textcolor{lightgray}{$A \rightarrow B :$} & \textcolor{lightgray}{$\{N_B-1\}_{K_{AB}}$}\\
       
   175 \end{tabular}
       
   176 \end{center}
       
   177 \end{minipage}\bigskip
       
   178 
       
   179 they argue \bl{$A$} and \bl{$B$} can check that the messages are not replays of earlier 
       
   180 runs, by checking the time difference when the protocol is last used
       
   181 \end{frame}}
       
   182 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
       
   183 
       
   184 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   185 \mode<presentation>{
       
   186 \begin{frame}[t]
       
   187 \frametitle{Denning-Sacco-Lowe Protocol}
       
   188 
       
   189 Lowe (1997) disagreed and said the handshake should be kept, 
       
   190 otherwise:\bigskip 
       
   191 
       
   192 \begin{minipage}{1.1\textwidth}
       
   193 \begin{center}
       
   194 \begin{tabular}{@{\hspace{-7mm}}r@ {\hspace{1mm}}l@{}}
       
   195 \bl{$A \rightarrow S :$} & \bl{$A, B, N_A$}\\
       
   196 \bl{$S \rightarrow A :$} & \bl{$\{N_A, B, K_{\!AB}, T_S, \!\{K_{\!AB}, A, T_S\}_{K_{BS}} \}_{K_{AS}}$}\\
       
   197 \bl{$A \rightarrow B :$} & \bl{$\{K_{AB}, A, T_S\}_{K_{BS}} $}\\
       
   198 \bl{$I(A) \rightarrow B :$} & \bl{$\{K_{AB}, A, T_S\}_{K_{BS}} $}\hspace{5mm}\textcolor{black}{replay}\\
       
   199 \end{tabular}
       
   200 \end{center}
       
   201 \end{minipage}\bigskip
       
   202 
       
   203 When is this a problem?\pause\medskip
       
   204 
       
   205 Assume \bl{$B$} is a bank and the message is ``Draw \pounds{1000} from \bl{$A$}'s
       
   206 account and transfer it to \bl{$I$}.''
       
   207 \end{frame}}
       
   208 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
       
   209 
       
   210 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   211 \mode<presentation>{
       
   212 \begin{frame}[t]
       
   213 \frametitle{Privacy}
       
   214 
       
   215 \begin{minipage}{1.05\textwidth}
       
   216 \begin{itemize}
       
   217 \item we \alert{do} want that government data is made public (free maps for example)
       
   218 \item we \alert{do not} want that medical data becomes public (similarly tax data, school 
       
   219 records, job offers)\bigskip
       
   220 \item personal information can potentially lead to fraud 
       
   221 (identity theft)
       
   222 \end{itemize}\pause
       
   223 
       
   224 {\bf ``The reality'':}
       
   225 \only<2>{\begin{itemize}
       
   226 \item London Health Programmes lost in June unencrypted details of more than 8 million people
       
   227 (no names, but postcodes and details such as gender, age and ethnic origin)
       
   228 \end{itemize}}
       
   229 \only<3>{\begin{itemize}
       
   230 \item also in June Sony got hacked: over 1M users' personal information, including passwords, email addresses, home addresses, dates of birth, and all Sony opt-in data associated with their accounts.
       
   231 \end{itemize}}
       
   232 \end{minipage}
       
   233 
       
   234 \end{frame}}
       
   235 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   236 
       
   237    
       
   238 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   239 \mode<presentation>{
       
   240 \begin{frame}[c]
       
   241 \frametitle{Privacy and Big Data}
       
   242 
       
   243 Selected sources of ``Big Data'':
       
   244 
       
   245 \begin{itemize}
       
   246 \item Facebook 
       
   247 \begin{itemize}
       
   248 \item 40+ Billion photos (100 PB)
       
   249 \item 6 Billion messages daily (5 - 10 TB)
       
   250 \item 900 Million users  
       
   251 \end{itemize}
       
   252 \item Common Crawl
       
   253 \begin{itemize}
       
   254 \item covers 3.8 Billion webpages (2012 dataset)
       
   255 \item 50 TB of data
       
   256 \end{itemize}
       
   257 \item Google
       
   258 \begin{itemize}
       
   259 \item 20 PB daily (2008)
       
   260 \end{itemize}
       
   261 \item Twitter
       
   262 \begin{itemize}
       
   263 \item 7 Million users in the UK
       
   264 \item a company called Datasift is allowed to mine all tweets since 2010
       
   265 \item they charge 10k per month for other companies to target advertisement
       
   266 \end{itemize}
       
   267 \end{itemize}\pause
       
   268 
       
   269 
       
   270 \end{frame}}
       
   271 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   272 
       
   273 
       
   274 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   275 \mode<presentation>{
       
   276 \begin{frame}[c]
       
   277 \frametitle{Cookies}
       
   278 
       
   279 ``We have published a new cookie policy. It explains what cookies are 
       
   280 and how we use them on our site. To learn more about cookies and 
       
   281 their benefits, please view our cookie policy.\medskip
       
   282 
       
   283 If you'd like to disable cookies on this device, please view our information 
       
   284 pages on 'How to manage cookies'. Please be aware that parts of the 
       
   285 site will not function correctly if you disable cookies. \medskip
       
   286 
       
   287 By closing this 
       
   288 message, you consent to our use of cookies on this device in accordance 
       
   289 with our cookie policy unless you have disabled them.''
       
   290 
       
   291 
       
   292 \end{frame}}
       
   293 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   294 
       
   295 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   296 \mode<presentation>{
       
   297 \begin{frame}[c]
       
   298 \frametitle{Scare Tactics}
       
   299 
       
   300 ``As we explain in our Cookie Policy, cookies help you to get the most 
       
   301 out of our websites.\medskip
       
   302 
       
   303 If you do disable our cookies you may find that certain sections of our 
       
   304 website do not work. For example, you may have difficulties logging in 
       
   305 or viewing articles.''
       
   306 
       
   307 
       
   308 
       
   309 
       
   310 \end{frame}}
       
   311 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   312 
       
   313 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   314 \mode<presentation>{
       
   315 \begin{frame}[c]
       
   316 \frametitle{Netflix Prize}
       
   317 
       
   318 Anonymity is \alert{necessary} for privacy, but \alert{not} enough!\bigskip
       
   319 
       
   320 \begin{itemize}
       
   321 \item Netflix offered in 2006 (and every year until 2010) a 1 Mio \$ prize for improving their movie rating algorithm
       
   322 \item dataset contained 10\% of all Netflix users (appr.~500K)
       
   323 \item names were removed, but included numerical ratings as well as times of rating
       
   324 \item average user rated 200 movies
       
   325 \item some information was \alert{perturbed} (i.e., slightly modified)
       
   326 \end{itemize}
       
   327 
       
   328 \hfill{\bf\alert{All OK?}}
       
   329 
       
   330 \end{frame}}
       
   331 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   332 
       
   333 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   334 \mode<presentation>{
       
   335 \begin{frame}[c]
       
   336 \frametitle{Re-identification Attack}
       
   337 
       
   338 Two researchers analysed the data: 
       
   339 
       
   340 \begin{itemize}
       
   341 \item with 8 ratings (2 of them can be wrong) and dates that have a 14-day error, 98\% of the
       
   342 records can be identified
       
   343 \item for 68\% only two ratings and dates are sufficient (for movie ratings outside the top 500)\bigskip\pause
       
   344 \item they took 50 samples from IMDb (where people can reveal their identity)
       
   345 \item 2 of them uniquely identified entries in the Netflix database (either by movie rating or by dates)
       
   346 \end{itemize}
       
   347 
       
   348 \end{frame}}
       
   349 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   350 
       
   351 
       
   352 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   353 \mode<presentation>{
       
   354 \begin{frame}[c]
       
   355 \frametitle{}
       
   356 
       
   357 \begin{itemize}
       
   358 \item Birth data, postcode and gender (unique for\\ 87\% of the US population)
       
   359 \item Preferences in movies (99\% of 500K for 8 ratings)
       
   360 \end{itemize}\bigskip
       
   361 
       
   362 Therefore best practices / or even law: 
       
   363 
       
   364 \begin{itemize}
       
   365 \item only year dates (age: 90 years or over), 
       
   366 \item no postcodes (sector data is OK, similarly in the US)\\
       
   367 \textcolor{gray}{no names, addresses, account numbers, licence plates}
       
   368 \item disclosure information needs to be retained for 5 years
       
   369 \end{itemize}
       
   370 
       
   371 \end{frame}}
       
   372 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   373 
       
   374 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   375 \mode<presentation>{
       
   376 \begin{frame}[c]
       
   377 \frametitle{How to Safely Disclose Information?}
       
   378 
       
   379 \only<1>{
       
   380 \begin{itemize}
       
   381 \item Assume you make a survey of 100 randomly chosen people.
       
   382 \item Say 99\% of the people in the 10 - 40 age group have seen the
       
   383 Gangnam video on youtube.\bigskip
       
   384 
       
   385 \item What can you infer about the rest of the population? 
       
   386 \end{itemize}}
       
   387 \only<2>{
       
   388 \begin{itemize}
       
   389 \item Is it possible to re-identify data later, if more data is released. \bigskip\bigskip\pause
       
   390 
       
   391 \item Not even releasing only  aggregate information prevents re-identification attacks.
       
   392 (GWAS was a public database of gene-frequency studies linked to diseases;
       
   393 you only needed enough data about phenotype (hair, eyes, skin colour...) in order
       
   394 to identify whether an individual was part of the study --- DB closed in 2008) 
       
   395 \end{itemize}}
       
   396 
       
   397 \end{frame}}
       
   398 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   399 
       
   400 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   401 \mode<presentation>{
       
   402 \begin{frame}[c]
       
   403 \frametitle{Differential Privacy}
       
   404 
       
   405 \begin{center}
       
   406 User\;\;\;\;    
       
   407 \begin{tabular}{c}
       
   408 tell me \bl{$f(x)$} $\Rightarrow$\\
       
   409 $\Leftarrow$ \bl{$f(x) + \text{noise}$}
       
   410 \end{tabular}
       
   411 \;\;\;\;\begin{tabular}{@{}c}
       
   412 Database\\
       
   413 \bl{$x_1, \ldots, x_n$}
       
   414 \end{tabular}
       
   415 \end{center}
       
   416 
       
   417 
       
   418 \begin{itemize}
       
   419 \item \bl{$f(x)$} can be released, if \bl{$f$} is insensitive to
       
   420 individual entries  \bl{$x_1, \ldots, x_n$}\\
       
   421 \item Intuition: whatever is learned from the dataset would be learned regardless of whether
       
   422 \bl{$x_i$} participates\bigskip\pause 
       
   423 
       
   424 \item Noised needed in order to prevent:\\ Christian's salary $=$ 
       
   425 \begin{center}
       
   426 \bl{\large$\Sigma$} all staff $-$  \bl{\large$\Sigma$} all staff $\backslash$ Christian
       
   427 \end{center} 
       
   428 \end{itemize}
       
   429 
       
   430 \end{frame}}
       
   431 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   432 
       
   433 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   434 \mode<presentation>{
       
   435 \begin{frame}[c]
       
   436 \frametitle{Adding Noise}
       
   437 
       
   438 Adding noise is not as trivial as one would wish:
       
   439 
       
   440 \begin{itemize}
       
   441 \item If I ask how many of three have seen the Gangnam video and get a result
       
   442 as follows 
       
   443 
       
   444 \begin{center}
       
   445 \begin{tabular}{l|c}
       
   446 Alice & yes\\
       
   447 Bob & no\\
       
   448 Charlie & yes\\
       
   449 \end{tabular}
       
   450 \end{center}
       
   451 
       
   452 then I have to add a noise of \bl{$1$}. So answers would be in the
       
   453 range of \bl{$1$} to \bl{$3$}
       
   454 
       
   455 \bigskip
       
   456 \item But if I ask five questions for all the dataset (has seen Gangnam video, is male, below 30, \ldots),
       
   457 then one individual can change the dataset by \bl{$5$}
       
   458 \end{itemize}
       
   459 
       
   460 \end{frame}}
       
   461 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   462 
       
   463 
       
   464 
       
   465 
       
   466 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
       
   467 \mode<presentation>{
       
   468 \begin{frame}[c]
       
   469 \frametitle{\begin{tabular}{@{}c@{}}Tor, Anonymous Webbrowsing\end{tabular}}
       
   470 
       
   471 \begin{itemize}
       
   472 \item initially developed by US Navy Labs, but then opened up to the world
       
   473 \item network of proxy notes
       
   474 \end{itemize}
       
   475 
       
   476 \end{frame}}
       
   477 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 
       
   478 
       
   479 
       
   480 
       
   481 
       
   482 \end{document}
       
   483 
       
   484 %%% Local Variables:  
       
   485 %%% mode: latex
       
   486 %%% TeX-master: t
       
   487 %%% End: 
       
   488