Intro

Question 1

Privacy Properties

Answer 1

• Confidentiality
• Pseudonymity
• Anonymity
• Unlinkability
• Unobservability
• Plausible deniability

Question 2

Privacy Property: Pseudonymity

Answer 2

A user may use a resource or service without disclosing its identity, but can still be accountable for that use

Question 3

Privacy Property: Anonymity

Answer 3

A characteristic of information that does not permit a personally identifiable information principal to be identified directly or indirectly

Question 4

Privacy property: Unlinkability

Answer 4

A user may make multiple uses of resources or services without others being able to link these uses together

Question 5

Privacy property: Unobservability

Answer 5

A user may use a record or service without others, especially third parties, without being able to observe that the resource or service is being used
-> Unobservability implies anonymity (but not vice versa)

Question 6

Privacy property: Plausible deniability

Answer 6

• Not possible to prove user knows, has done or has said something
  -> Resistance to coercion: one can always claim one does not know
  -> Resistance to profiling: one cannot filter the fake entries

Question 7

Systematic Privacy Evaluation

Answer 7

1) Model the privacy-preserving mechanism as a probabilistic transformation
2) Determine what the adversary will see
3) “Invert” the mechanism as the adversary would do
4) Evaluate property after inversion
5) Measure