Security-control methods for statistical databases: A comparative study

ACM Computing Surveys (CSUR)

Volumn 21, Issue 4, 1989, Pages 515-556

  Adam, Nabil R ^a   Worthmann, John C ^b  

^a RUTGERS UNIVERSITY   (United States)

^b EINDHOVEN UNIVERSITY OF TECHNOLOGY   (Netherlands)

Author keywords

Compromise; controls; disclosure; inference; security

Indexed keywords

DATA PROCESSING--SECURITY OF DATA;

DATABASE SECURITY; STATISTICAL DATABASES;

DATABASE SYSTEMS;

EID: 0024914229     PISSN: 03600300     EISSN: 15577341     Source Type: Journal    
DOI: 10.1145/76894.76895     Document Type: Article

References (68)

1. Abul-Ela, A.-L., Greenberg, B. G., and Horvitz, D. G. 1967. A multi-proportions randomized response model. J. Am. Stat. Assoc. 62, 319 (Sept.), 990–1008.
2. Achugbue, J. O., and Chin, F. Y. 1979. The effectiveness of output modification by rounding for protection of statistical databases. INFOR 17, 3 (Aug.), 209–218.
3. Beck, L. L. 1980. A security mechanism for statistical databases. ACM Trans. Database Syst. 5, 3 (Sept.), 316–338.
4. Chin, F. Y. 1978. Security in statistical databases for queries with small counts. ACM Trans. Database Syst. 3, 1, 92–104.
5. Chin, F. Y., Kossowski, P., and Loh, S. C. 1984. Efficient inference control for range sum queries. Theor. Comput. Sci. 32, 77–86.
6. Chin, F. Y., and ÖzsoyoǦlu, G. 1982. Auditing and inference control in statistical databases. IEEE Trans. Softw. Eng. SE-8, 6 (Apr.), 574–582.
7. Chin, F. Y., and ÖzsoyoǦlu, G. 1981. Statistical database design. ACM Trans. Database Syst. 6, 1 (Mar.), 113–139.
8. Chin, F. Y., and ÖzsoyoǦlu, G. 1979. Security in partitioned dynamic statistical databases. In Proceedings of the IEEE COMPSAC, pp. 594–601.
9. Cox, L. H. 1980. Suppression methodology and statistical disclosure control. J. Am. Stat. Assoc. 75, 370 (June), 377-–385.
10. Dalenius, T. 1981. A simple procedure for controlled rounding. Statistik Tidskrift 3, 202–208.
11. Dalenius, T. 1977. Towards a methodology for statistical disclosure control. Statistik Tidskrift 15, 429–444.
12. Dalenius, T. 1974. The invasion of privacy problem and statistics production. An overview. Statistik Tidskrift 12, 213–225.
13. Denning, D. E. 1985. Commutative filters for reducing inference threats in multilevel database systems. In Proceedings of the 1985 Symposium on Security and Privacy, IEEE Computer Society, pp. 134–146.
14. Denning, D. E. 1984. Cryptographic check-sums for multilevel database security. In Proceedings of the 1984 Symposium on Security and Privacy, IEEE Computer Society, pp. 52–61.
15. Denning, D. E. 1983. A security model for the statistical database problem. In Proceedings of the 2nd International Workshop on Management, pp. 1–16.
16. Denning, D. E. 1982. Cryptography and Data Security. Addison-Wesley, Reading, Mass.
17. Denning, D. E. 1981. Restricting queries that might lead to compromise. In Proceedings of IEEE Symposium on Security and Privacy (Apr.), pp. 33–40.
18. Denning, D. E. 1980. Secure statistical databases with random sample queries. ACM Trans. Database Syst. 5, 3 (Sept.), 291-315.
19. Denning, D. E., and Schlörer, J. 1983. Inference control for statistical databases. Computer 16, 7 (July), 69–82.
20. Denning, D. E., and Schlörer, J. 1980. A fast procedure for finding a tracker in a statistical database. ACM Trans. Database Syst. 5,1 (Mar.), 88–102.
21. Denning, D. E., Schlörer, J., and Wehrle, E. 1982. Memoryless inference controls for statistical databases. Computer Science Dept., Purdue Univ.
22. Denning, D. E., Denning, P. J., and Schwartz, M. D. 1979. The tracker: A threat to statistical database security. ACM Trans. Database Syst. 4, 1 (Mar.), 76–96.
23. Dobkin, D., Jones, A. K., and Lipton, R. J. 1979. Secure databases: Protection against user influence. ACM Trans. Database Syst. 4, 1 (Mar.), 97–106.
24. Fellegi, I. P. 1972. On the question of statistical confidentiality. J. Am. Stat. Assoc. 67, 337 (Mar.), 7–18.
25. Fellegi, I. P., and Phillips, J. L. 1974. Statistical confidentiality: Some theory and applications to data dissemination. Ann. Ec. Soc. Meas. 3, 2 (Apr.), 399–409.
26. Friedman, A. D., and Hoffman, L. J. 1980. Towards a fail-safe approach to secure databases. In Proceedings of IEEE Symposium on Security and Privacy (Apr.).
27. Ghosh, S. P. 1986. Statistical relational tables for statistical database management. IEEE Trans. Softw. Eng. SE-12, 12, 1106–1116.
28. Ghosh, S. P. 1985. An application of statistical databases in manufacturing testing. IEEE Trans. Softw. Eng. SE-11, 7, 591–596.
29. Ghosh, S. P. 1984. An application of statistical databases in manufacturing testing. In Proceedings of IEEE COMPDEC Conference.
30. Greenberg, B. G., Abernathy, J. R., and Horvitz, D. G. 1969a. Application of randomized response technique in obtaining quantitative data. In Proceedings of Social Statistics Section, America, Statistical Association, (Aug.), 40–43.
31. Greenberg, B. G., Abul-Ela, A.-L., Simmons, W. R., and Horvitz, D. G. 1969b. The unrelated question randomized response model: Theoretical framework. J. Am. Stat. Assoc. 64, 326 (June), 520–539.
32. Haq, M. I. Ul. 1977. On safeguarding statistical disclosure by giving approximate answers to queries. In Proceedings of International Computer Symposium (North-Holland), pp. 491–495.
33. Haq, M. I. Ul. 1975. Insuring individual’s privacy from statistical database users. In Proceedings of National Computer Conference (Montvale, N.J.), vol. 44. AFIPS Press, Arlington, Va., pp. 941–946.
34. Hoffman, L. J. 1977. Modern Methods for Computer Security and Privacy. Prentice-Hall, Englewood Cliffs, N.J.
35. Hoffman, L. J., and Miller, W. F. 1970. Getting a personal dossier from a statistical data bank. Datamation 16, 5 (May), 74–75.
36. Jonge, W. de 1983. Compromising statistical databases: Responding to queries about means. ACM Trans. Database Syst. 8, 1 (Mar.), 60–80.
37. Kam, J. B., and Ullman, J. D. 1977. A model of statistical databases and their security. ACM Trans. Database Syst. 2, 1, 1–10.
38. Lefons, D., Silvestri, A., and Tangorra, F. 1983. An analytic approach to statistical databases. In Proceedings of 9th Conference on Very Large Databases (Florence, Italy), pp. 260–273.
39. Leiss, E. 1982. Randomizing a practical method for protecting statistical databases against compromise. In Proceedings of 8th Conference on Very Large Databases, pp. 189–196.
40. Liew, C. K., Choi, W. J., and Liew, C. J. 1985. A data distortion by probability distribution. ACM Trans. Database Syst. 10, 3, 395–411.
41. Matloff, N. E. 1986. Another look at the use of noise addition for database security. In Proceedings of IEEE Symposium on Security and Privacy, pp. 173–180.
42. McLeish, M. 1983. An information theoretic approach to statistical databases and their security: A preliminary report. In Proceedings of the 2nd International Workshop on Statistical Database Management, pp. 355–359.
43. Miller, A. R. 1971. The Assault on Privacy-Computers, Data Banks and Dossiers. University of Michigan Press, Ann Arbor, Mich.
44. Morgenstern, M. 1987. Security and Inference in Multi-level Database and Knowledge-Bare Systems. In Proceedings of ACM Special Interest Group on Management of Data, pp. 357–373.
45. ÖzsoyoǦlu, G., and Chin, F. Y. 1982. Enhancing the security of statistical databases with a question-answering system and a kernel design. IEEE Trans. Softw. Eng. SE-8, 3, 223–234.
46. ÖzsoyoǦlu, G., and Chung, J. 1986. Information loss in the lattice model of summary tables due to cell suppression. In Proceedings of IEEE Symposium on Security and Privacy, pp. 75–83.
47. ÖzsoyoǦlu, G., and ÖzsoyoǦlu, M. 1981. Update handling techniques in statistical databases. In Proceedings of the 1st LBL Workshop on Statistical Database Management (Berkeley, Calif., Dec), pp. 249–284.
48. ÖzsoyoǦlu, G., and Su, T. A. 1985. Rounding and inference control in conceptual models for statistical databases. In Proceedings of IEEE Symposium on Security and Privacy, pp. 160–173.
49. Palley, M. A. 1986. Security of statistical databases compromise through attribute correlational modeling. In Proceedings of IEEE Conference on Data Engineering, pp. 67–74.
50. Palley, M. A., and Simonoff, J. S. 1987. The use of regression methodology for compromise of confidential information in statistical databases. ACM Trans. Database Syst. 12, 4 (Dec), 593–608.
51. Reiss, J. P. 1980. Practical data-swapping: The first steps. In Proceedings of IEEE Symposium on Security and Privacy, pp. 36–44.
52. Reiss, S. P. 1984. Practical data swapping: The first steps. ACM Trans. Database Syst. 9, 1 (Mar.), 20–37.
53. Rowe, N. 1984. Diophantine inference from statistical aggregates on few-valued attributes. In Proceedings of IEEE Conference on Data Engineering, pp. 107–110.
54. Sande, G. 1983. Automated cell suppression to reserve confidentiality of business statistics. In Proceedings of the 2nd International Workshop on Statistical Database Management, pp. 346–353.
55. Schlörer, J. 1983. Information loss in partitioned statistical databases. Comput. J. 26, 3, 218–223.
56. Schlörer, J. 1981. Security of statistical databases: multidimensional transformation. ACM Trans. Database Syst. 6, 1 (Mar.), 95–112.
57. Schlörer, J. 1980. Disclosure from statistical databases: Quantitative aspects of trackers. ACM Trans. Database Syst. 5, 4 (Dec), 467–492.
58. Schlörer, J. 1976. Confidentiality of statistical records: A threat monitoring scheme of on-line dialogue. Methods Inform. Med. 15, 1, 36–42.
59. Schlörer, J. 1975. Identification and retrieval of personal records from a statistical data bank. Methods Info. Med. 14, 1, 7–13.
60. Schwartz, M. D., Denning, D. E., and Denning, P. J. 1979. Linear queries in statistical databases. ACM Trans. Database Syst. 4, 2, 156–167.
61. Su, T., and ÖzsoyoǦlu, G. 1987. Data dependencies and inference control in multilevel relational database systems. In Proceedings of the 1987 Symposium on Security and Privacy, IEEE Computer Society, pp. 202–211.
62. Tendick, P., and Matloff, N. S. 1987. Recent results on the noise addition method for database security. Presented at the Joint ASA/IMS Statistical Meetings, San Francisco.
63. Traub, J. F., Yemini, Y., and Wozniakowski, H. 1984. The statistical security of a statistical database. ACM Trans. Database Syst. 9, 4 (Dec), 672–679.
64. Trueblood, R. P. 1984. Security issues in knowledge systems. In Proceedings of 1st International Workshop on Expert Database Systems, vol. 2, pp. 834–840.
65. Turn, R., and Shapiro, N. Z. 1978. Privacy and security in databank systems: Measure of effectiveness, costs, and protector-intruder interactions. Computers and Security, C. T. Dinardo, Ec AFIPS Press, Arlington, Va., pp. 49–57.
66. Warner, S. L. 1971. The linear randomized response model. J. Am. Stat. Assoc. 66, 336 (Dec.; 884–888.
67. Warner, S. L. 1965. Randomized response: A sur vey technique for eliminating evasive answer bias J. Am. Stat. Assoc. 60, 309 (Mar.), 63–69.
68. Yu, C. T., and Chin, F. Y. 1977. A study on the protection of statistical databases. In Proceedings of ACM SIGMOD International Conference on Management of Data (Aug.), pp. 169–181.