Disclosure detection in multivariate categorical databases: auditing confidentiality protection through two new matrix operators

Management Science

Volumn 45, Issue 12, 1999, Pages 1710-1723

  Chowdhury, Sumit Dutta ^a   Duncan, George T ^a   Krishnan, Ramayya ^a   Roehrig, Stephen F ^a   Mukherjee, Sumitra ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER NETWORKS; COMPUTER SIMULATION; DATA PRIVACY; INFORMATION RETRIEVAL; LINEAR PROGRAMMING; MATRIX ALGEBRA; SECURITY OF DATA;

CONFIDENTIALITY PROTECTION; DATA ACCESS; DISCLOSURE DETECTION; DISCLOSURE LIMITATION; DISCLOSURE RISK; MATRIX COMPARATIVE ASSIGNMENT; MATRIX METHODS; NETWORK MODELS;

DATABASE SYSTEMS;

EID: 0033349024     PISSN: 00251909     EISSN: None     Source Type: Journal    
DOI: 10.1287/mnsc.45.12.1710     Document Type: Article

References (38)

1. Adam, N. R., J. C. Wortman. 1989. Security-control methods for statistical databases: A comparative study. ACM Comput. Surveys 21 515-556.
2. Barquin, R., H. Edelstein, eds. 1997. Planning and Designing the Data Warehouse. Prentice Hall, New York.
3. Carvalho, F. D., N. Dellaert, M. S. Osorio. 1994. Statistical disclosure in two-dimensional tables: Positive tables. JASA Theory and Methods 89 1547-1557.
4. Chvátal, V. 1980. Linear Programming. W. H. Freeman & Co., New York.
5. Cox, L. H. 1980. Suppression methodology and statistical disclosure control. JASA 75 377-385.
6. _. 1987. New results in disclosure avoidance for tabulations. Internat. Statist. Institute, Proc. 46th Session. Voorburg, The Netherlands. 83-84.
7. _. 1992. Solving confidentiality protection problems in tabulations using network optimization: A network model for cell suppression in U.S. economic censuses. Internat. Seminar on Statist. Confidentiality. Eurostat, Dublin, Ireland 229-45.
8. _. 1995. Network models for complementary cell suppression. JASA 90 1453-1562.
9. _, J. T. Fagan, B. V. Greenberg, R. Hammig. 1986. Research at the Census Bureau into disclosure avoidance techniques for tabular data. Proc. Section on Survey Res. Methods. American Statistical Association, Washington, D.C. 388-393.
10. Denning, D. E. 1980. Secure statistical databases with random sample queries. ACM Trans. Database Systems 5 291-315.
11. De Vries, R. E. 1993. Disclosure control of tabular data using subtables. Report, Department of Statistical Methods, Statistics Netherlands, Voorburg, The Netherlands.
12. Duncan, G. T. 1997. Data for health: Privacy and access standards for a health care information ethics. Audrey R. Chapman, ed. Health Care and Information Ethics: Protecting Fundamental Human Rights. Sheed and Ward, Kansas City, MO.
13. _, S. E. Fienberg. 1998. Obtaining information while preserving privacy: A Markov perturbation method for tabular data. Proc. Statist. Data Protection '98, Eurostat, Lisbon, Portugal March.
14. _, D. Lambert. 1986. Disclosure-limited data dissemination. (With discussion by L. Cox, O. Frank, J. Gastwirth and H. Roberts). JASA 81 10-28.
15. _, _. 1989. The risk of disclosure of microdata. J. Bus. Econom. Statist. 7 207-217.
16. _, R. W. Pearson. 1991. Enhancing access to data while protecting confidentiality: Prospects for the future. Statist. Sci. 6 219-239.
17. _, R. Krishnan, R. Padman, P. Reuther, S. F. Roehrig. 1997. Cell suppression to limit content-based disclosure. Proc. Thirtieth Ann. Hawaii Internat. Conf. System Sci. Maui, Hawaii.
18. Ernst, L. 1989. Further applications of linear programming to sampling problems. SRD Report: Census/SRD/RR-89-05 (1989), Bureau of the Census, Washington, D.C.
19. Fellegi, I. P. 1972. On the question of statistical confidentiality. JASA 67 7-18.
20. Fienberg, S. 1998. Fréchet and Bonferroni bounds for multiway tables of counts with applications to disclosure limitation. Proc. Statist. Data Protection '98. Eurostat, Lisbon, Portugal March.
21. Fréchet, M. 1940. Les Probabilités Associées a un Système d'Événments Compatibles et Dépendants. Priemiere Partie. Hermann & Cie, Paris, France.
22. Gopal, R., P. Goes, R. Garfinkel. 1998. Interval protection of confidential information in a database. INFORMS J. Comput. 10(3) 309-322.
23. Gusfield, D. 1988. A graph theoretic approach to statistical data security. SIAM J. of Comput. 17 552-571.
24. Kelly, T., S. Golden, A. Assad. 1990. Controlled rounding of tabular data. Oper. Res. 38 760-772.
25. Kelly, J., _, _. 1992. Cell suppression: Disclosure protection for sensitive tabular data. NETWORKS 22 397-417.
26. Kwerel, S. M. 1988. Fréchet bounds. S. Kotz, N. L. Johnson, eds. Encyclopedia of Statistical Sciences, Wiley & Sons, New York 202-209.
27. Lougee-Heimer, R. 1989. Guaranteeing confidentiality: The protection of tabular data. Masters Thesis, Department of Mathematical Sciences, Clemson University, South Carolina.
28. Muralidhar, K., D. Batra, P. Kirs. 1995. Accessibility, security, and accuracy in statistical databases: The case for the multiplicative fixed data perturbation approach. Management Sci. 40 1549-1563.
29. Nargundkar, M. S., W. Saveland. 1972. Random rounding of tables to prevent statistical disclosure. Proc. of the Social Statist. Section, Amer. Statist. Assoc. Washington, D.C. 382-387.
30. Repsilber, D. 1991. Safeguarding secrecy in aggregative data. Proc. 1991 Internat. Seminar Statist. Confidentiality. Eurostat, Dublin, Ireland 353-368.
31. _. 1993. Preservation of confidentiality in aggregated data. Second Internat. Seminar Statist. Confidentiality. Luxembourg.
32. Robertson, D. A. 1994. Automated disclosure control at Statistics Canada. Working Paper, Statistics Canada, Ottawa, Ont.
33. Rowe, E. 1991. Some considerations in the use of linear networks to suppress tabular data. Proc. Section on Survey Res. Methods. American Statistical Association, Washington D.C. 357-362.
34. Sande, G. 1984. Automated cell suppression to preserve confidentiality of business statistics. Stat. J. United Nations. ECE 2 Geneva, Switzerland 33-41.
35. Schlörer, J. 1975. Identification and retrieval of personal records from a statistical data bank. Methods Info. Med. 15 7-13.
36. Sullivan, C., L. Zayatz. 1991. A network flow disclosure avoidance system applied to the census of agriculture. Proc. Section on Survey Res. Methods. American Statistical Association, Washington D.C. 363-368.
37. Willenborg, L., T. de Waal. 1996. Statistical Disclosure Control in Practice. Springer-Verlag, New York.
38. Zayatz, L. 1992. Linear programming methodology used for disclosure avoidance purposes at the census bureau. Proc. Section on Survey Res. Methods. American Statistical Association, Washington, D.C.