On tracker attacks in health grids

Proceedings of the ACM Symposium on Applied Computing

Volumn 1, Issue , 2006, Pages 209-216

  Simpson, Andrew ^a   Power, David ^a   Slaymaker, Mark ^a  

^a UNIVERSITY OF OXFORD   (United Kingdom)

Author keywords

Inference control; Medical databases

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; ELECTRONIC DATA INTERCHANGE; HEALTH CARE; HOSPITAL DATA PROCESSING; INFORMATION TECHNOLOGY;

CLINICAL COMMUNITIES; ELECTRONIC PATIENT RECORDS; HEALTHCARE DELIVERY;

DATABASE SYSTEMS;

EID: 33751041502     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1141277.1141326     Document Type: Conference Paper

References (43)

1. N. R. Adam and J. C. Wortman. Security-control methods for statistical databases: a comparative study. ACM Computing Surveys, 21(4):515-556, 1989.
2. N. Ahituv, Y. Lapid, and S. Neumann. Protecting statistical databases against retrieval of private information. Computers & Security, 7:59-63, 1988.
3. F. Berman, G. C. Fox, and A. J. G. Hey, editors. Grid Computing: Making The Global Infrastructure a Reality. Wiley, 2003.
4. J. G. Bethelehem, W. J. Keller, and J. Pannekoek. Disclosure control of microdata. Journal of the American Statistical Association, 85:38-45, 1990.
5. J. Biskip and P. A. Bonatti. Controlled query evaluation for enforcing confidentiality in complete information systems. International Journal of Information Security (special issue on ESORICS 2002), 2(1):14-27, October 2004.
6. J. M. Brady, D. J. Gavaghan, A. C. Simpson, M. M. Parada, and R. P. Highnam. e-DiaMoND: A Grid-enabled federated database of annotated mammograms. In F. Berman, G. C. Fox, and A. J. G. Hey, editors, Grid Computing: Making the Global Infrastructure a Reality, pages 923-943. Wiley Series, 2003.
7. The Caldicott Report. www.publications.doh.gov.uk/ipu/confiden, December 1997.
8. S. Castano, M. Fugini, G. Martella, and P. Samarati. Database Security. Addison-Wesley, 1994.
9. G. Chen and S. Keller-McNulty. Estimation of deidentification disclosure risk in microdata. Journal of Official Statistics, 14(1):79-95, 1998.
10. H. Chivers and A. P. Martin. Software: Practice and experience (special issue on grid security), 2005.
11. T. Dalenius and S. P. Reiss. Data-swapping: a technique for disclosure contol. Journal of Statistical Planning and Inference, 6:73-85, 1982.
12. D. E. Denning. Are statistical databases secure? In Proceedings of the 1978 National Computer Conference, pages 525-530. AFIPS Press, 1978.
13. D. E. Denning. Cryptography and Data Security. Addison-Wesley, 1982.
14. D. E. Denning and P. J. Denning. Data security. ACM Computing Surveys, 11(3), September 1979.
15. D. E. Denning, P. J. Denning, and M. D. Schwartz. The tracker: a threat to statistical database security. ACM Transactions on Database Systems, 4(1):7-18, 1978.
16. D. Dobkin, A. K. Jones, and R. J. Lipton. Secure databases: protection against user influence. ACM Transactions on Database Systems, 4(1):97-106, 1979.
17. Data Protection Act 1998. The Stationery Office Limited, London, 1998.
18. G. T. Duncan and S. Mukherjee. Optimal disclosure limitation strategy in statistical databases: deterring tracker attackes through additive noise. Journal of the American Statistical Association, 95:720-729, 2000.
19. C. Farkas and S. Jajodia. The inference problem: a survey. SIGKDD explorations, 4(2):6-11, 2002.
20. I. Foster and C. Kesselman, editors. The Grid: Blueprint For A New Computing Infrastructure. Morgan Kaufmann, 1999.
21. T. D. Friedman and L. J. Hoffman. Towards a fail-safe approach to secure databases. In Proceedings of the 1980 IEEE Symposium on Security and Privacy, Oakland, pages 18-21, 1980.
22. HealthGrid White paper. http://whitepaper.healthgrid.org.
23. www.hhs.gov/ocr/hipaa.
24. Human Rights Act 1998. The Stationery Office Limited, London, 1998.
25. M. Humber. National Programme for Information Technology. British Medical Journal, 328(7449):1145-1146, 2004.
26. T. B. Jabine. Statistical disclosure limitation practices of the United States Statistical Agencies. Journal of Official Statistics, 9(2):427-154, 1993.
27. S. Keller-McNulty and E. A. Unger. Database Systems: inferential security. Journal of Official Statistics, 9(2):475-400, 1993.
28. D. Lambert. Measures of disclosure risk and harm. Journal of Official Statistics, 9(2):313-331, 1993.
29. Z. Michalewicz. Statistical and scientific databases. Ellis Horwood, 1991.
30. J. Powell and I. Buchan. Electronic health records should support clinical research. Journal of Medical Internet Research, 7(1):e4, 2005.
31. D. J. Power, E. A. Politou, M. A. Slaymaker, and A. C. Simpson. Towards secure grid-enabled healthcare. Software: Practice and Experience, 35(9):857-871, 2005.
32. D. J. Power, M. A. Slaymaker, E. A. Politou, and A. C. Simpson. Protecting sensitive patient data via query modification. In ACM Symposium on Applied Computing, pages 224-230, 2005.
33. D. J. Power, M. A. Slaymaker, and A. C. Simpson. On deducibility and anonymisation in medical databases. In W. Jonker and M. Petkovic, editors, Proceedings of SDM 2005, pages 170-184. Springer-Verlag Lecture Notes in Computer Science, volume 3674, 2005.
34. J. Schlörer. Identification and retrieval of personal records from a statistical databank. Methods of Information in Medicine, 14(1):7-13, 1975.
35. J. Schlörer. Disclosure from statistical databases: quantitative aspects of trackers. ACM Transactions on Database Systems, 5(4):467-492, December 1980.
36. G. L. Sicherman, W. de Jonge, and R. P. van de Riet. Answering questions without revealing secrets. ACM Transactions on Database Systems, 8(1):41-59, March 1983.
37. M. Stonebraker. Implementation of integrity constraints and views by query modification. In Proceedings of ACM SIGMOD International Conference on the Management of Data, pages 65-78, 1975.
38. M. Stonebraker and E. Wong. Access control in a relational data base management system by query modification. In ACM/CSC-ER Proceedings of the 1974 annual conference, 1974.
39. P. Tendick and N. Matloff. A modified random perturbation method for database security. ACM Transactions on Database Systems, 19(1):47-63, 1994.
40. 2Mon): an improved query processing solution. In W. Jonker and M. Petkovic, editors, Proceedings of SDM 2005, pages 124-142. Springer-Verlag Lecture Notes in Computer Science, volume 3674, 2005.
41. T. M. Truta, F. Fotouhi, and D. Barth-Jones. Disclosure risk measures for the sampling disclosure control method. In Proceedings of the 2004 ACM Symposium on Applied Computing, pages 301-306, 2004.
42. L. Wang, S. Jajodia, and D. Wijesekera. Securing OLAP data cubes against privacy breaches. In Proceedings of the 2004 IEEE Symposium on Security and Privacy, pages 161-175, 2004.
43. L. Willemborg and T. Waal. Elements of statistical disclosure control. Springer-Verlag, 2001.