Randomness and Computation

Slides:



Advertisements
Similar presentations
Pseudorandom Walks: Looking Random in The Long Run or All The Way? Omer Reingold Weizmann Institute.
Advertisements

Finding Cycles and Trees in Sublinear Time Oded Goldreich Weizmann Institute of Science Joint work with Artur Czumaj, Dana Ron, C. Seshadhri, Asaf Shapira,
An Introduction to Randomness Extractors Ronen Shaltiel University of Haifa Daddy, how do computers get random bits?
Models of Computation Prepared by John Reif, Ph.D. Distinguished Professor of Computer Science Duke University Analysis of Algorithms Week 1, Lecture 2.
Foundations of Cryptography Lecture 10 Lecturer: Moni Naor.
Introductions for the “Weizmann Distinguished Lectures Day” by Oded Goldreich.
Some Thoughts regarding Unconditional Derandomization Oded Goldreich Weizmann Institute of Science RANDOM 2010.
The Bright Side of Hardness Relating Computational Complexity and Cryptography Oded Goldreich Weizmann Institute of Science.
Complexity and Cryptography
Perfect and Statistical Secrecy, probabilistic algorithms, Definitions of Easy and Hard, 1-Way FN -- formal definition.
ACT1 Slides by Vera Asodi & Tomer Naveh. Updated by : Avi Ben-Aroya & Alon Brook Adapted from Oded Goldreich’s course lecture notes by Sergey Benditkis,
On Proximity Oblivious Testing Oded Goldreich - Weizmann Institute of Science Dana Ron – Tel Aviv University.
1 On approximating the number of relevant variables in a function Dana Ron & Gilad Tsur Tel-Aviv University.
1 Constructing Pseudo-Random Permutations with a Prescribed Structure Moni Naor Weizmann Institute Omer Reingold AT&T Research.
The Power of Randomness in Computation 呂及人中研院資訊所.
Lecture 20: April 12 Introduction to Randomized Algorithms and the Probabilistic Method.
On Testing Computability by small Width OBDDs Oded Goldreich Weizmann Institute of Science.
A Brief Introduction To The Theory of Computer Science and The PCP Theorem By Dana Moshkovitz Faculty of Mathematics and Computer Science The Weizmann.
In a World of BPP=P Oded Goldreich Weizmann Institute of Science.
Sedgewick & Wayne (2004); Chazelle (2005) Sedgewick & Wayne (2004); Chazelle (2005)
Finding Cycles and Trees in Sublinear Time Oded Goldreich Weizmann Institute of Science Joint work with Artur Czumaj, Dana Ron, C. Seshadhri, Asaf Shapira,
CMSC 414 Computer and Network Security Lecture 3 Jonathan Katz.
Randomness – A computational complexity view Avi Wigderson Institute for Advanced Study.
Of 28 Probabilistically Checkable Proofs Madhu Sudan Microsoft Research June 11, 2015TIFR: Probabilistically Checkable Proofs1.
A Property Testing Double-Feature of Short Talks Oded Goldreich Weizmann Institute of Science Talk at Technion, June 2013.
Why Extractors? … Extractors, and the closely related “Dispersers”, exhibit some of the most “random-like” properties of explicitly constructed combinatorial.
Amplification and Derandomization Without Slowdown Dana Moshkovitz MIT Joint work with Ofer Grossman (MIT)
Pseudo-random generators Talk for Amnon ’ s seminar.
NP ⊆ PCP(n 3, 1) Theory of Computation. NP ⊆ PCP(n 3,1) What is that? NP ⊆ PCP(n 3,1) What is that?
Complexity Theory and Explicit Constructions of Ramsey Graphs Rahul Santhanam University of Edinburgh.
Zero Knowledge r Two parties:  All powerful prover P  Polynomially bounded verifier V r P wants to prove a statement to V with the following properties:
Complexity Classes.
On Sample Based Testers
Probabilistic Algorithms
Derandomization & Cryptography
Introduction to Randomized Algorithms and the Probabilistic Method
On Testing Dynamic Environments
Approximating the MST Weight in Sublinear Time
Sublinear-Time Error-Correction and Error-Detection
Finding Cycles and Trees in Sublinear Time
Sublinear-Time Error-Correction and Error-Detection
Zero Knowledge Anupam Datta CMU Fall 2017
Modern symmetric-key Encryption
CS154, Lecture 18:.
On Learning and Testing Dynamic Environments
Pseudorandomness when the odds are against you
Background: Lattices and the Learning-with-Errors problem
Cryptography Lecture 5.
Local Error-Detection and Error-correction
CMSC 414 Computer and Network Security Lecture 3
Cryptography Lecture 6.
Pseudo-derandomizing learning and approximation
Introduction to PCP and Hardness of Approximation
Pseudo-deterministic Proofs
Interactive Proofs Adapted from Oded Goldreich’s course lecture notes.
Oded Goldreich Weizmann Institute of Science
Linear sketching with parities
Cryptography Lecture 5.
Cryptography Lecture 8.
Interactive Proofs Adapted from Oded Goldreich’s course lecture notes.
Interactive Proofs Adapted from Oded Goldreich’s course lecture notes.
The Subgraph Testing Model
Every set in P is strongly testable under a suitable encoding
CS21 Decidability and Tractability
Cryptography Lecture 6.
On Derandomizing Algorithms that Err Extremely Rarely
Oded Goldreich Weizmann Institute of Science
Introduction to Decision Sciences
Stronger Connections Between Circuit Analysis and Circuit Lower Bounds, via PCPs of Proximity Lijie Chen Ryan Williams.
Interactive Proofs Adapted from Oded Goldreich’s course lecture notes.
Presentation transcript:

Randomness and Computation Oded Goldreich Dept. of Computer Science and Applied Math. Weizmann Institute Slides for MINERVA presentation MINERVA MINI-SYMPOSIA (Natural Sciences) – 7/10/13, Session IB

The Interplay of Randomness and Computation Odd: Seems that computation (as a deterministic process) stands in contrast to the notion of randomness. But if you consider the output of a deterministic process on a randomly distributed input, then… Or an algorithm that tosses coins: Probabilistic Proof Systems: E.g., IP, ZK, and PCP. Pseudorandomness and De-randomization. Property Testing and Sub-linear Time Algorithms PPS and PRG are related to the Foundations of Crypto. Comment: ZK and PRG are closely related to Cryptography.

Probabilistic Proof Systems Odd: Don’t we want certainty in proofs? Well, we’ll get certainty up to an explicitly bounded error probability, and this will allow us advantages over the traditional notion (of a deterministically verifiable) proof. IP (interactive proof): convincing via interaction. ZK (zero-knowledge): w.o. revealing anything (beyond). PCP (Prob. Checkable Pf.): while reading three bits. PCP: Trade-off between the number of bits read and the confidence parameter!

Pseudorandomness (and PRGs) What does this mean (in CS)? A deterministic process that stretches short random seeds into (much) longer sequences that “look random”. What does “look random” mean? See 1st parameter (below). PRG is a “family name”; members differ by parameters: Computational indistinguishability w.r.t a specific class of observers (defined by their resources). Comput. complexity of generation (i.e., of the PRG). The amount of stretch. Re (1): E.g., all efficient observers, all small-space observers, all linear tests, all tests that look at five bits.

Property Testing (sublinear-time approx. decision) What is an approximate decision? Distinguishing objects that have a (predetermined) property from objects that are “far” from having this property. Advantage: the algorithm may inspect a small portion of the tested object! That’s typically the goal in PT. An example you all know: Estimating the average value of a function defined over a huge domain. This simple example refers to “unstructured” objects and properties. Our focus is on “structured” ones. E.g., testing that a graph is bipartite or cycle-free. One-sided error vs two-sided error. Adaptive vs non-adaptive.

One concrete research project (i.e., recent, ongoing) Context: De-randomization. Known: Given a ``very simple algorithm’’ (i.e., constant-depth circuit) that evaluates to the value 1 on at least half of its inputs, we can determinstically find an input that evaluates to 1 “almost efficiently” (i.e., quasi-poly-time). N.B.: It is easy to find such an input probabilistically. New: If we are guaranteed that the number of bad inputs is sub-exponential (in the input length), then we can find a good input efficiently. If the class of circuits is mildly extended, then this relaxation is not helpful. Constant-depth circuits = the most simple model of algorithms.

End The slides of this talk are available at http://www.wisdom.weizmann.ac.il/~oded/T/minerva.ppt