Alfred Rossi
Distinguished Scientist and Engineer at Immuta
Research interests: Mathematical privacy and privacy risk assessment; formal models of data protection law; automated reasoning and knowledge representation.
Education
Doctor of Philosophy, Computer Science and Engineering
Thesis: Temporal Clustering of Finite Metric Spaces and Spectral k-Clustering.
Master of Science, Computer Science and Engineering
Master of Science, Physics
Bachelor of Science, Physics and Mathematics
Academic Employment
Visiting Fellow
Senior Lecturer
Postdoctoral Researcher
Research Assistant
Publications
Anonymisation in motion: from data protection to digital markets law.
Parajudica: An RDF-Based Reasoner and Metamodel for Multi-Framework Context-Dependent Data Compliance Assessments.
A critical assessment of EDPB Opinion 28/2024: Towards a principle-based approach to innovation?
Pseudonymous Data.
What are Trusted Third Parties? (Part 2)
What are Trusted Third Parties? (Part 1)
The technical fix for international data transfers - a word of caution.
Aggregation, synthesization and anonymization: a call for a risk-based assessment of anonymization approaches.
Spectral Concentration and Greedy k-Clustering.
Temporal Hierarchical Clustering.
Temporal Clustering.
Polyak-Viro Formulas for the Coefficients of the Conway Polynomial.
Patents
Systems and Methods for Reduction of Privacy Risk in Data.
Systems and Methods to Enhance Privacy through Decision Tree Based Suppression Rules on Relational Databases.
Systems and Methods for Privacy-Enhancing Modification of a Database Query.
Systems and Methods for Obscuring Data from a Data Source. (Continuation.)
Systems and Methods for Privacy-Enhancing Transformation of a SQL Query.
Systems and Methods for Obscuring Data from a Data Source.
Patent Applications
Systems and Methods for Classifying a Data Source Containing String Values.
Systems and Methods for Determining a Risk Level of Data in a Response to Queries to a Database.
Advisory Activities
The Battle for Data Availability under EU Digital Regulation: Anonymisation, Reuse, and the Future of Personal Data.
Invited participant.
Consultation on the data protection-compliant handling of personal data in AI models.
Consultation response, and invited expert at the follow-up roundtable (October 9, 2025).
PETs for Health Data.
Workshop panelist discussing the use of PETs in the context of health data.
PETs Experts Forum.
Comments on European Data Protection Board (EDPB) draft recommendations on the use of PETs in the context of the European General Data Protection Regulation (GDPR).
Technologies for the Ethical Deployment of Algorithms.
Workshop panelist discussing the ethical use of AI in decision making processes.
Private Set Intersection.
Met with the ICO to discuss legal and technical aspects of data sharing using PSI.
PETs Expert Roundtable.
Presentations, Lectures, & Workshops
De-Identification at the Intersection of Law and Technology.
Level-setting workshop at the invitation-only Regulatory Strategy Roundtable Notions of Personal Data in the Digital Omnibus: How to Uphold a Principles-Based Approach? Future of Privacy Forum and Brussels Privacy Hub, in collaboration with the LSTS Research Group, Vrije Universiteit Brussel. FARI, Brussels. (Presented online.)
On Unconditional PET love & a few inconsistencies.
Summer Academy For Global Privacy Law 2023. Brussels Privacy Hub. Vrije Universiteit Brussel.
Designing a Private Approach.
Summer Academy For Global Privacy Law 2023. Brussels Privacy Hub. Vrije Universiteit Brussel.
State of Play of De-identification Techniques. Future of Privacy Forum Master Class at Computers, Privacy & Data Protection (CPDP2022) in Brussels, Belgium.
Your Guide to Understanding and Operationalizing the Privacy by Design Framework.
Explained the role of privacy enhancing technologies in a technical/legal talk on Privacy by Design. Talk hosted by the International Association of Privacy Professionals and offered for Continuing-Privacy Education (CPE) credit.
A Data Scientist's Guide to Preserving Privacy.
Explained the use of privacy-enhancing technologies such as k-anonymization, differential privacy in data science and machine learning.
Temporal Clustering.
Presentation to CSE Industrial Advisory Board. Dept. of Computer Science & Engineering, The Ohio State University.
Temporal Clustering.
CSE Student Research Poster Exhibition. Dept. of Computer Science & Engineering, The Ohio State University.
Spectral concentration and greedy k-clustering.
CSE Student Research Poster Exhibition. Dept. of Computer Science & Engineering, The Ohio State University.
Spectral concentration and greedy k-clustering.
Presentation to CSE Industrial Advisory Board. Dept. of Computer Science & Engineering, The Ohio State University.
Spectral concentration and greedy k-clustering.
CSE Student Research Poster Exhibition. Dept. of Computer Science & Engineering, The Ohio State University.
Constructive Generation of Arrow Diagram Formulas for the Coefficients of the Conway Polynomial
Young Mathematicians Conference, The Ohio State University.
An Algorithm for Producing Arrow Diagram Formulas for the Coefficients of the Conway Polynomial
SUMs, James Madison University, Harrisonburg, VA.
Professional Experience
Distinguished Scientist and Engineer
Research Scientist
- Pioneered cutting-edge SQL transformers for the integration of privacy mechanisms. Particularly, for rewriting aggregate queries to ensure differential privacy (US Patent 11,593,506, February 2023), and for achieving local differential privacy through randomized response (US Patent 11,783,077, October 2023).
- Led the architectural design and contributed to the development of a system that infers database column types from column data without requiring explicit transfer. Notably, this locality-preserving system works remotely over a sample, offering PAC-like robustness guarantees.
- Implemented critical cryptographic libraries, such as format-preserving encryption (FF1), order-preserving encryption (Boldyreva, Chenette, Lee, O'Neil), and AES.
- Advanced format-preserving encryption and randomized response techniques to finite regular languages. This was achieved by creating an efficient library to enumerate the accepting set of a regular expression, supporting conversion between an accepted value and its index in constant time for a fixed pattern.
- Developed effective best-effort solutions to hard combinatorial optimization problems such as reducing excess privilege in role-based access policies while simultaneously minimizing the number of replacement roles. (NP-hard to even approximate by reduction to boolean matrix factorization.)
- Conceived and implemented a unique clustering algorithm that leverages minimum capacity constraints for k-anonymization.
- Designed and implemented a novel one-pass streaming algorithm for constructing a k-anonymizing attribute suppression decision tree.
- Conceived, developed, and implemented a framework for differential data risk assessment enabling, e.g., detection of queries that would inadvertently re-identify de-identified data.
- Provided expert consultation to the company on modern best practices in mathematical privacy, including the application of differential privacy, zero-knowledge proofs, partially and fully homomorphic encryption, queries over encrypted data, and secure multi-party computation techniques.
- Authored numerous scholarly papers and guidance materials on the application of Privacy-Enhancing Technologies (PETs).
- Frequently served as an advisor to the UK Information Commissioner's Office (ICO) on the application of PETs, including active participation in the PETs Expert Forum (2021-2022) and PETs Expert Roundtable (September 9, 2019).
Founder and CTO
- Advise company technical direction in accordance with best current practice, specifically in the areas of data model design, disaster recovery, internationalization, operations, scalability, security, software development methodology, system architecture, and user data privacy.
- Establish policies and procedures for compliance, governance, and management of risk, especially in the handling of personal data under the General Data Protection Regulation (GDPR).
- Developed a multi-tenant Learning Management Platform (VueJS, golang, Postgres, Google Cloud Platform, Kubernetes), currently in use by Cooper Tire & Rubber Company.
- Architectural and technical lead on a product (under development) that optimizes vehicle service center resource utilization through smart appointment scheduling.
Founder and Developer
- Developed novel cryptographic services to facilitate digital document signing.
- Architected and developed an internationalized (multi-lingual) Learning Management System (C#, VueJS, ASP.NET MVC, MS SQL Server, Azure) for retailers. Currently in use by Under Armour to train third party sales associates (e.g. retail sales associates at Dick's Sporting Goods, Cabela's, ...) on Under Armour products.
- Helped a top 30 U.S. Bank (by asset size) predict the cost of premiums associated with new account marketing campaigns.
- Provided architectural direction and was sole backend developer (golang, Postgres) of a streaming music application (SavageTrap). App was a five star application in both iOS and Google Play stores, and had supported over 290k registered users at the time of shutdown.
- Guided the transition of a top 250 U.S. website (by traffic) from traditional monolithic application architecture to distributed, containerized microservice architecture enhancing availability and fault-tolerance.
- Developed several high-performance application-specific reverse proxies (golang) responsible for operations such as realtime forensic analysis of web traffic, realtime marketing analytics (Druid, Hadoop, Kafka, Zookeeper), template expansion, and load balancing (among others).
- Migrated traditional web-application infrastructure to containerized Docker-based cluster infrastructure with multihost-networking (Rancher, libnetwork) and automated service discovery (consul, etcd, skydock).
- Implemented transparent distributed high performance real time traffic analysis for advertiser dashboards (golang, druid, zookeeper, kafka).
- Applied best practices from distributed systems to architect highly available applications.
- Developed a business intelligence portal (Java, OSGI) integrating Saiku BI with customer databases for a cloud-based sales management service.
- Automated server provisioning with ansible.
Consultant
- Provided consulting to Battelle, as needed, on a variety of topics in the realms of scientific computing and systems administration.
- Consulted on the technical planning and feasibility analysis for the implementation of the next generation of Battelle's HPC cluster (Galileo).
- Investigated graph layout algorithms for fast visualization of large (approximately 10,000-node) nearly-planar graphs for use in custom software tool for modeling large scale electrical networks.
- Jointly supported a combined Linux / Windows Server environment including VMware ESXi and WebLogic application servers.
- Jointly responsible for administration and support of 30+ node Linux HPC cluster.
Operations Manager and Lead DevOps Engineer
- Responsible for designing, implementing, monitoring, and maintaining efficient and fault-tolerant infrastructure for highly available web applications.
- Developed custom DAV (milton.io-based), SFTP (apache mina-based), FTP (mina-based) file servers in Java enabling customer access to files stored in BrickFTP (the company's flag-ship product).
- Instrumented code to capture performance data from applications in production, enabling real-time monitoring and analysis.
- Maintainer of Action Verb's heavily modified internal branch of S3FS (a fuse based file system (C++) backed with Amazon's S3 service.)
- Developed drop-in extension libraries enabling hosted applications to interface with Action Verb's deployment platform.
- Automated infrastructure deployment with Chef (Ruby).
- Systems Administrator for 50+ Linux servers (Ubuntu, RHEL) and several MySQL databases. Systems covered included DNS, FTP, SVN, NFS, mail, web, and application servers.
- Worked extensively with Amazon AWS services including EC2, S3, IAM, RDS, and VPC.
Researcher
- Aided in the design of physical test articles and developed computer-vision based analysis software for performing diagnostic evaluation of multi-view, multi-energy transmission x-ray systems.
- Performed mathematical modeling of the system response of CT scanners and statistical analysis of CT images for diagnostic evaluation.
- Developed applications for the visualization of tomographic reconstructions of CT data and image analysis.
- Analyzed the evolving DICOS standard (a data storage and interchange standard for security imaging devices based on the medical data acquisition standard DICOM), and developed DICOS related software tools. Most notably, a configurable rule based validator for DICOS data sets.
- Performed mathematical modeling of general sensor / system response, with an additional focus on heat flux sensors for use in gathering burn injury prediction data.
- Responsible for supporting group efforts which require software development, most notably a software package for the automated post-processing of test data and report generation.
- Jointly responsible for the design, administration, and continued functioning of the group high-performance computing cluster.
- Recipient of 5 outstanding performance awards, and pending nomination for the Emerging Scientist award at time of departure.
Teaching
Foundations I: Discrete Structures (CSE 2321)
Taught Fall 2017, Spring 2018, Fall 2018, Spring 2019, Spring 2020, Fall 2022, and Spring 2023.
- Topics include propositional and first-order logic, basic mathematical proof techniques, graphs, analysis of algorithms, asymptotic analysis, solving recurrence relations, and basic sorting and searching.
Machine Learning and Statistical Pattern Recognition (CSE 5523)
- Topics include concentration inequalities, probability theory, formal learning models (including the PAC, mistake-bound, consistency, and agnostic PAC models), VC dimension, formal models of privacy and their use in machine learning.
Foundations II: Data Structures and Algorithms (CSE 2331)
- Topics include design and analysis of algorithms and data structures, divide-and-conquer, sorting and selection, search trees, hashing, graph algorithms, string matching, probabilistic analysis, randomized algorithms, and NP-completeness.
Blogs
Other Academic & Professional Experience
Teaching Assistant
- Taught recitation courses and labs corresponding to calculus-based mechanics (Physics 131 Autumn 2008), and calculus-based electrostatics (Physics 132).
Instructor
- Responsible for teaching the recitation course corresponding to Math 150 (Autumn 2007), grading, holding office hours, and working one-on-one to tutor and enhance student's understanding of pre-calculus mathematics.
Proprietor
- Developed several websites for the purpose of selling online advertising.
- thatvideogamesite.com (sold 10/2007): Developed flash game site in PHP. Implemented custom caching system for reducing system load under heavy traffic from digg, fark, and addictinggames.com.
- theunverse.net (no longer online): Social link sharing site developed in Ruby on Rails. Developed javascript heavy front-end with script.aculo.us. Profiled extensively to identify and mitigate bottlenecks in ActiveRecord queries.
Programmer
- Implemented numerous custom software packages including a web based system for submitting molecular dynamics simulation jobs to a supercomputer, and custom visualization software in C++ for displaying and animating the results of such a simulation.
- Evaluated the efficacy of Bezier curves in the modeling of physical potentials.
Student Researcher
- Conceived, designed, and implemented a custom software package to help oversee the manufacturing, testing, and shipment of components for the Stanford Linear Accelerator.
- Interfaced custom test equipment with centralized back-end database.
Languages, Libraries, Packages, Platforms, and Technologies
- Languages
- C, C++, C#, Clay, Go (golang), Haskell, HaXe, Java, Javascript, OCaml, PHP, Python, Ruby, Rust, TypeScript, x86 and z80 assembly.
- Libraries
- Boost, Elixir, jQuery, Qt, numpy, OpenCV, Ruby on Rails, scipy, SQLAlchemy, VueJS, wxWidgets.
- Packages
- Ansible, Apache HTTPd, Cacti, Chef, Consul, Docker, Doxygen, etcd, Git, Kafka, lighttpd, Maui, Mercurial, Nginx, Salt, TORQUE Resource Manager, Redmine, Subversion, Zookeeper.
- Platforms
- (Unix-likes) Darwin/OSX, Linux, OpenBSD. (Runtime Environments) .NET, Java. (Cloud Providers) Amazon Web Services, Google Cloud Platform, Microsoft Azure. (Container Orchestration) Docker Swarm, Rancher, Kubernetes.
- Markup
- CSS, HTML, Markdown.
- Database Engines
- (Relational) MS SQL Server, MySQL, Postgres, and SQLite. (Time-Series) Druid, InfluxDB.
- Visualization
- OpenGL, VTK.