Abstract
Privacy, preservation and performance ("3 P's") are central design objectives for distributed data management systems. However, these objectives tend to compete with one another. This paper presents a model for describing distributed data management systems, along with a framework for measuring the privacy, preservation and performance offered by such systems. The framework enables a system designer to quantitatively explore and optimize the tradeoffs between the 3 P's.