Matt J. Kusner

Plausible Deniability Guarantees for Whistleblowers

This work formalizes protection against a strong-adversary threat model as per-report $(0, \delta)-differential privacy on the transcript of audit selections, and proves that a natural approach can never outperform uniform random auditing by more than $\delta$ at any horizon.