Denials leak information: Simulatable auditing
Show that query denials can leak private information in online auditing. Introduce a new model called simulatable auditing where query denials provably do not leak information. Propose a probabilistic compromise definition to overcome limitations of the classical definition. Present simulatable auditing algorithms under classical and probabilistic compromise definitions.
auditing privacy-preserving simulation paradigm