Optimal disclosure limitation strategy in statistical databases: Deterring tracker attacks through additive noise

Journal of the American Statistical Association

Volumn 95, Issue 451, 2000, Pages 720-729

  Duncan, George T ^a   Mukherjee, Sumitra ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b NOVA SOUTHEASTERN UNIVERSITY   (United States)

Author keywords

Autocorrelation; Computer database; Confidentiality; Data access; Data perturbation; Privacy

Indexed keywords

EID: 2242464139     PISSN: 01621459     EISSN: 1537274X     Source Type: Journal    
DOI: 10.1080/01621459.2000.10474260     Document Type: Article

References (44)

1. Adam, N. R., Gangophadhyay, A., and Holowczak, R. (1998), “A Survey on Research on Database Protection,” in Proceedings of Statistical Data Protection ’98, Eurostat, Lisbon, Portugal, March 25-27.
2. Adam, N. R., and Wortmann, J. C. (1989), “Security-Control Methods for Statistical Databases: A Comparative Study,” ACM Computing Surveys, 21, 515-556.
3. Ahituv, N., Lapid, Y., and Neumann, S. (1988), “Protecting Statistical Databases Against Retrieval of Private Information,” Computers & Security, 7, 59-63.
4. Beck, L. L. (1980), “A Security Mechanism for Statistical Databases,” ACM Transactions on Database Systems, 5, 316-338.
5. Bethlehem, J. G., Keller, W. J., and Pannekoek, J. (1990), “Disclosure Control of Microdata,” Journal of the American Statistical Association, 85, 38-45.
6. Cassel, C. M. (1976), “Probability Based Disclosures,” in Personal Integrity and the Need for Data in the Social Sciences, eds. T. Dalenius and A. Klevmarken, Stockholm: Swedish Council for Social Science Research, 189-193.
7. Castano, S., Fugini, M., Martella, G., and Samarati, P. (1994), “Intrusion Detection Systems,” in Database Security, New York: Addison-Wesley, pp. 343-382.
8. Chin, F. Y., and Ozsoyoglu, G. (1981), “Statistical Database Design,” ACM Transactions on Database Systems, 6, 113-139.
9. Cox, L. H. (1980), “Suppression Methodology and Statistical Disclosure Control,” Journal of the American Statistical Association, 75, 377-385.
10. Cox, L. H. (1995), “Network Models for Complementary Cell Suppression,” Journal of the American Statistical Association, 90, 1453-1462.
11. Dalenius, T. (1988), Controlling Invasion of Privacy in Statistical Research Units, Stockholm: Statistics Sweden.
12. Dalenius, T., and Reiss, S. P. (1982), “Data Swapping: A Technique for Disclosure Control,” Journal of Statistical Planning and Inference, 6, 73-85.
13. Denning, D. E., Denning, P. J., and Schwartz, M. D. (1978), “The Tracker: A Threat to Statistical Database Security,” ACM Transactions on Database Systems, 4, 7-18.
14. Denning, D. E., and Schlorer, J. (1980), “A Fast Procedure for Finding a Tracker in a Statistical Database,” ACM Transactions on Database Systems, 5, 88-102.
15. Dobkin, D., Jones, A. K., and Lipton, R. J. (1979), “Secure Databases: Protection Against User Influence,” ACM Transactions on Database Systems, 4, 97-106.
16. Duncan, G. T., Jabine, T. B., and de Wolf, V. A. (1993), Private Lives and Public Policies: Confidentiality and Accessibility of Government Statistics, Washington, DC: National Academy Press.
17. Duncan, G. T., and Lambert, D. (1986), “Disclosure—Limited Data Dissemination” (with discussion), Journal of the American Statistical Association, 81, 10-28.
18. Duncan, G. T., and Lambert, D. (1989), “The Risk of Disclosure of Microdata,” Journal of Business and Economic Statistics, 1, 207-217.
19. Duncan, G. T., and Mukherjee, S. (1991), “Microdata Disclosure Limitation in Statistical Databases: Query Size Restriction and Random Sample Query Control,” in Proceedings of the 1991 IEEE Computer Society Symposium on Research in Security and Privacy, pp. 278-287.
20. Duncan, G. T., and Mukherjee, S. (1992), “Disclosure Limitation in Statistical Databases Using Autoregressive Noise,” in Database Security VI: Status and Prospects, eds. C. Landwehr and B. Thuraisingham, Amsterdam: North-Holland, pp. 211-224.
21. Duncan, G. T., and Pearson, R. W. (1991), “Enhancing Access to Data While Protecting Confidentiality: Prospects for the Future,” Statistical Science, 6, 219-239.
22. Fellegi, I. P. (1972), “On the Question of Statistical Confidentiality,” Journal of the American Statistical Association, 67, 7-18.
23. Frank, O. (1976), “Individual Disclosures From Frequency Tables,” in Personal Integrity and the Need for Data in the Social Sciences, eds. T. Dalenius and A. Klevmarken, Stockholm: Swedish Council for Social Science Research, pp. 175-187.
24. Frank, O. (1978), “An Application of Information Theory to the Problem of Statistical Disclosure,” Journal of Statistical Planning and Inference, 2, 143-152.
25. Frank, O. (1983), “Statistical Disclosure Control,” Statistical Review, 5, 173-178.
26. Friedman, A. D., and Hoffman, L. J. (1980), “Towards a Fail-safe Approach to Statistical Databases,” in Proceedings of IEEE Symposium on Security and Privacy, pp. 18-21.
27. Fuller, W. A. (1993), “Masking Procedures for Microdata Disclosure Limitation,” Journal of Official Statistics, 9, 383-106.
28. Jabine, T. B. (1993), “Statistical Disclosure Limitation Practices of the United State Statistical Agencies,” Journal of Official Statistics, 9, 427-454.
29. Javitz, H. S., and Valdes, A. (1991), “The SRI IDES Statistical Anomaly Detector,” in Proceedings of the IEEE Symposium on Research in Security and Privacy, pp. 316-326.
30. Keller-McNulty, S., McNulty, M. S., and Unger, E. A. (1989), “The Protection of Confidential Data,” in Proceedings of the 21st Symposium on the Interface, American Statistical Association, pp. 215-219.
31. Keller-McNulty, S., and Unger, E. A. (1993), “Database Systems: Inferential Security,” Journal of Official Statistics, 9, 475-500.
32. Kim, J. J. (1986), “A Method for Limiting Disclosure in Microdata Based on Random Noise and Transformation,” in Proceedings of the Survey Research Methods Section, American Statistical Association, pp. 456-461.
33. Lambert, D. (1993), “Measures of Disclosure Risk and Harm,” Journal of Official Statistics, 9, 313-331.
34. Matloff, N. S. (1986), “Another Look at Noise Addition for Database Security,” in Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, pp. 173-180.
35. Michalewicz, Z., Li, J., and Chen, K. (1990), “Ranges and Trackers in Statistical Databases,” in Proceedings of the 5th International Conference on Statistical and Scientific Databases (Springer-Verlag Lecture Notes on Computer Science No. 420), pp. 65-79.
36. Mukherjee, S. (1998), “Should Non-Sensitive Attributes be Masked? Data Quality Implications of Data Perturbation in Regression Analysis,” in Proceedings of the Thirty-First Annual Hawaii International Conference on System Sciences, 6, 223-231.
37. Paass, G. (1988), “Disclosure Risk and Disclosure Avoidance for Microdata,” Journal of Business and Economic Statistics, 6, 487-500.
38. Rainwater, L., and Smeeding, T. M. (1988), “The Luxembourg Income Study: The Use of International Telecommunications in Comparative Social Research,” Annals of the American Academy of Political and Social Science, 495, 95-105.
39. Schlorer, J. (1975), “Identification and Retrieval of Personal Records from a Statistical Databank,” Methods of Information in Medicine, 14, 7-13.
40. Schlorer, J. (1980), “Disclosure from Statistical Databases: Quantitative Aspects of Trackers,” ACM Transactions on Database Systems, 5,467-492.
41. Spruill, N. L., and Gastwirth, J. L. (1982), “On the Estimation of the Correlation Coefficient from Grouped Data,” Journal of the American Statistical Association, 11, 614-620.
42. Tendick, P. (1991), “Optimal Noise Addition for the Preservation of Confidentiality in Multivariate Data,” Journal of Statistical Planning and Inference, 27, 342-353.
43. Tendick, P., and Matloff, N. (1994), “A Modified Random Perturbation Method for Database Security,” ACM Transactions on Database Systems, 19, 47-63.
44. Willenborg, L., and de Waal, T. (1996), Statistical Disclosure Control in Practice, New York: Springer-Verlag, 1996.