# Calendar (Tentative) For differential privacy, we will use the textbook *Algorithmic Foundations of Data Privacy* (AFDP) by Cynthia Dwork and Aaron Roth, available [here](https://www.cis.upenn.edu/~aaroth/Papers/privacybook.pdf). Date | Topic | Presenter :----:|-------|:---------: |

**Differential Privacy**

| 9/5 | [Course welcome, introducing differential privacy](../resources/slides/lecture01.html)
**Paper:** Keshav. [*How to Read a Paper*](https://web.stanford.edu/class/ee384m/Handouts/HowtoReadPaper.pdf). | JH 9/10 | Basic private mechanisms
**Reading:** AFDP 3.2, 3.3 | JH 9/12 | What does differential privacy actually mean?
**Reading:** McSherry. [*Lunchtime for Differential Privacy*](https://github.com/frankmcsherry/blog/blob/master/posts/2016-08-16.md) (see also these [two](https://github.com/frankmcsherry/blog/blob/master/posts/2016-06-14.md) [posts](https://github.com/frankmcsherry/blog/blob/master/posts/2016-08-29.md)) | JH 9/17 | Composition and closure properties
**Reading:** AFDS 3.5
**Due: Project topics and groups**
| JH 9/19 | Exponential mechanism
**Paper:** McSherry and Talwar. [*Mechanism Design via Differential Privacy*](http://kunaltalwar.org/papers/expmech.pdf). | JH **9/21 (FRI)** | Identity-Based Encryption from the Diffie-Hellman Assumption
**SPECIAL TIME AND PLACE: 4 PM, CS 1240**
| Sanjam Garg 9/24 | Privacy for data streams
**Paper:** Chan, Shi, and Song. [*Private and Continual Release of Statistics*](https://eprint.iacr.org/2010/076.pdf). | 9/26 | Report-noisy-max and the Sparse Vector Technique **Reading:** AFDS 3.3, 3.5 | JH 10/1 | Answering lots of queries: Private multiplicative weights
**Paper:** Hardt, Ligett, and McSherry. [*A Simple and Practical Algorithm for Differentially Private Data Release*](https://papers.nips.cc/paper/4548-a-simple-and-practical-algorithm-for-differentially-private-data-release.pdf). | 10/3 | Local differential privacy (theory) AFDS 12.1 | JH 10/8 | Local differential privacy (practice)
**Paper:** Erlingsson, Pihur, and Korolova. [*RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response*](https://arxiv.org/pdf/1407.6981.pdf). | 10/10 | More differential privacy
**Paper:** | 10/15 |
**NO CLASS: INSTRUCTOR AWAY**
| 10/17 |
**NO CLASS: INSTRUCTOR AWAY**
**Due: Milestone 1**
| |

**Cryptographic Techniques**

| 10/22 | Crypto: overview and basics | JH 10/24 | Secure multiparty computation
**Paper:** | 10/29 | Homomorphic encryption
**Paper:** | 10/31 | Verifiable computing
**Paper:** | 11/5 | More applied crypto
**Paper:** | |

**Language-Based Security**

| 11/7 | LangSec: overview and basics | JH 11/12 | Secure Information Flow
**Paper:** | 11/14 | Languages for privacy
**Paper:**
**Due: Milestone 2**
| 11/19 | Symbolic cryptography
**Paper:** | 11/21 | More LangSec
**Paper:** | |

**Adversarial Machine Learning**

| 11/26 | AML: overview and basics
**GUEST LECTURE**
| Somesh Jha 11/28 | AML: overview and basics
**GUEST LECTURE**
| Somesh Jha 12/3 | Adversarial examples
**Paper:** | 12/5 | Training-time attacks
**Paper:** | 12/10 | Model-theft attacks
**Paper:** | 12/12 | More AML
**Paper:** |