Masking and re-identification methods for public-use microdata: Overview and research problems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3050, Issue , 2004, Pages 231-246

  Winkler, William E ^a  

^a U S CENSUS BUREAU   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTERS;

ANALYTIC PROPERTIES; GENERAL INFORMATION; MASKED DATA; MICRODATA; RE IDENTIFICATIONS; RESEARCH PROBLEMS; SYNTHETIC DATA;

ARTIFICIAL INTELLIGENCE;

EID: 34250727770     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-25955-8_18     Document Type: Article

References (72)

1. Abowd, J. M. and Woodcock, S. D. Disclosure Limitation in Longitudinal Linked Data, in (P. Doyle et al., eds.) Confidentiality, Disclosure, and Data Access, North Holland: Amsterdam, (2002)
2. Agrawal, D. and Aggarwal, C. C. On the Design on Privacy Preserving Data Mining Algorithms, Proceedings of the ACM SIGPODS, (2001) 247-255
3. Agrawal, R. and Srikant, R. Privacy Preserving Data Mining, Proceedings of the ACM SIGMOD, (2000) 439-450
4. Bacher, J., Brand, R. and Bender, S. Re-identifying Register Data by Survey Data using Cluster Analysis: An Empirical Study, International Journal of Uncertainty, Fuzziness, Knowledge-Based Systems, 10 (5) (2002) 589-608
5. Benedetti, P. and Franconi, L. Statistical and Technological Solutions to the Controlled Data Dissemation. In: Pre-proceedings of New Techniques and Technologies for Statistics, Volume 1, Sorrento (1998) 225-232
6. Bethlehem, J. A., Keller, W. J. and Pannekoek, J. Disclosure Control of Microdata, Journal of the American Statistical Association, 85 (1990) 38-45
7. Bilenko, M., Mooney, R., Cohen, W., Ravikumar P., and Fienberg, S. Adaptive Name Matching in Information Integration, IEEE Intelligent Systems, 18 (5) (2003) 16-23
8. Brand, R. Microdata Protection Through Noise Addition, in (J. Domingo-Ferrer, ed.) Inference Control in Statistical Databases, Springer: New York (2002)
9. Dalenius, T. and Reiss, S.P. Data-swapping: A Technique for Disclosure Control, Journal of Statistical Planning and Inference, 6 (1982) 73-85
10. Dandekar, R. A., Domingo-Ferrer, J., and Sebe, F. LHS-Based Hybrid Microdata vs Rank Swapping and Microaggregation for Numeric Microdata Protection, in (J. Domingo-Ferrer, ed.) Inference Control in Statistical Databases, Springer: New York (2002).
11. Dandekar, R., Cohen, M., and Kirkendal, N. Sensitive Microdata Protection Using Latin Hypercube Sampling Technique, in (J. Domingo-Ferrer, ed.) Inference Control in Statistical Databases, Springer: New York (2002)
12. Defays, D. and Anwar, M. N. Masking Microdata Using Micro-aggregation, Journal of Official Statistics, 14, (1998) 449-461
13. De Waal, A. G. and Willenborg, L.C.R.J. Global Recodings and Local Suppressions in Microdata Sets, Proceedings of Statistics Canada Symposium 95, (1995) 121-132
14. De Waal, A. G. and Willenborg, L.C.R.J. A View of Statistical Disclosure Control for Microdata, Survey Methodology, 22, (1996) 95-103
15. Domingo-Ferrer, J. (ed.) Inference Control in Statistical Databases, Springer: New York (2002)
16. Domingo-Ferrer, J. and Mateo-Sanz, J. M. An Empirical Comparison of SDC Methods for Continuous Microdata in Terms of Information Loss and Re-Identification Risk, presented at the UNECE Workshop On Statistical Data Editing, Skopje, Macedonia, May 2001
17. Domingo-Ferrer, J. and Mateo-Sanz, J. M. Practical Data-Oriented Microaggregation for Statistical Disclosure Control, IEEE Transactions on Knowledge and Data Engineering, 14 (1), (2002) 189-201
18. Domingo-Ferrer, J. and Torra, V. A Quantitative Comparison of Disclosure Control Methods for Microdata, in (P. Doyle, J. Lane, J. Theeuwes, and L. Zayatz, eds. Confidentiality, Disclosure Control and Data Access: Theory and Practical Applications, North Holland, (2001) 111-134
19. Domingo-Ferrer, J. and Torra, V. Statistical Data Protection in Statistical Microdata Protection via Advanced Record Linkage, Statistics and Computing, 13 (4), (2003) 343-354
20. Duncan, G. T., Keller-McNulty, S. A., and Stokes, S. L. Disclosure Risk vs. Data Utility: The R-U Confidentiality Map, Los Alamos National Laboratory Technical Report LA-UR-01-6428 (2001)
21. Elliott, M. A., Manning, A. M., and Ford, R. W. A Computational Algorithm for Handling the Special Uniques Problem, International Journal of Uncertainty, Fuzziness, and Knowledge-Based Systems, 10 (5), (2002) 493-510
22. Elliott, M. A., Skinner, C. J., and Dale, A. Special Uniques, Random Uniques, and Sticky Populations: Some Counterintuitive Effects of Geographical Detail on Disclosure Risk, in Statistical Data Protection '98, Eurostat, Brussels, Belgium, (1998), 261-265,
23. also Research in Official Statistics, 1 (2) 53-68
24. Fellegi, I. P., and Sunter, A. B. A Theory for Record Linkage, Journal of the American Statistical Association, 64, (1969) 1183-1210
25. Fienberg, S. E. Confidentiality and Disclosure Limitation Methodology: Challenges for National Statistics and Statistical Research, commissioned by Committee on National Statistics of the National Academy of Sciences (1997)
26. Fienberg, S. E., and Makov, U. Confidentiality, Uniqueness, and Disclosure Limitation for Categorical Data, Journal of Official Statistics, 14 (1998) 385-397
27. Fienberg, S. E., Makov, E. U. and Sanil, A. P., A Bayesian Approach to Data Disclosure: Optimal Intruder Behavior for Continuous Data, Journal of Official Statistics, 14, (1997) 75-89
28. Fienberg, S. E., Makov, E. U. and Steel, R. J. Disclosure Limitation using Perturbation and Related Methods for Categorical Data, Journal of Official Statistics, 14, (1998), 485-502
29. Fuller, W. A. Masking Procedures for Microdata Disclosure Limitation, Journal of Official Statistics, 9, (1993) 383-406
30. Gomatam, S. V. and Karr, A. On Data Swapping of Categorical Data, American Statistical Association, Proceedings of the Section on Survey Research Methods, (2003), CD-ROM
31. Iyengar, V. Transforming Data to Satisfy Privacy Constraints, Association of Computing Machinery, Special Interest Group on Knowledge Discovery and Datamining '02 (2002)
32. Kennickell, A. B. Multiple Imputation and Disclosure Control: The Case of the 1995 Survey of Consumer Finances, in Record Linkage Techniques 1997, Washington, DC: National Academy Press, 248-267 (available at http://www.fcsm.gov) (1999)
33. Kim, J. J. A Method for Limiting Disclosure in Microdata Based on Random Noise and Transformation, American Statistical Association, Proceedings of the Section on Survey Research Methods, (1986) 303-308
34. Kim, J. J. Subdomain Estimation for the Masked Data, American Statistical Association, Proceedings of the Section on Survey Research Methods, (1990) 456-461
35. Kim, J. J. and Winkler, W. E. Masking Microdata Files, American Statistical Association, Proceedings of the Section on Survey Research Methods, (1995) 114-119
36. Lambert, D. Measures of Disclosure Risk and Harm,Joumal of Official Statistics, 9, (1993) 313-331
37. Little, R. J. A. Statistical Analysis of Masked Data, Journal of Official Statistics, 9, (1993) 407-426
38. Little, R. J. A. and Liu, F. Selective Multiple Imputation of Keys for Statistical DisclosureControl in Microdata, American Statistical Association, Proceedings of the Section on Survey Research Methods, CD-ROM, (2002)
39. Little, R. J. A. and Liu, F. Comparison of SMIKe with Data-Swapping and PRAM for Statistical Disclosure Control of Simulated Microdata, American Statistical Association, Proceedings of the Section on Survey Research Methods, (2003)
40. Malin, B. Sweeney, L., and Newton, E. Trail Re-identification: Learning Who You are from Where You have Been, Workshop on Privacy in Data, Carnegie-Mellon University, March 2003.
41. McCallum, A. and Wellner, B. Object Consolidation by Graph Partitioning with a Conditionally-Trained Distance Metric, Proceedings of the ACM Workshop on Data Cleaning, Record Linkage and Object Identification, Washington DC, August 2003.
42. Moore, R. Controlled Data Swapping Techniques for Masking Public Use Data Sets, U.S. Bureau of the Census, Statistical Research Division Report rr96/04, (available at http://www.census.gov/srd/www/byyear.html) (1995).
43. Muralidhar, K., Parsa, R. and Sarathy, R. A General Additive Data Perturbation Method for Database Security, Management Science, 45 (10), (1999) 1399-1415
44. Muralidhar, K., Sarathy, R. and R. Parsa, R. An Improved Security Requirement for Data Perturbation with Implications for E-Commerce, Decision Sciences, 32 (4), (2001) 683-698
45. Paas, G. Disclosure Risk and Disclosure Avoidance for Microdata, Journal of Business and Economic Statistics, 6, (1988) 487-500
46. Palley, M. A. and Simonoff, J. S. The Use of Regression Methodology for the Compromise of Confidential Information in Statistical Databases, ACM Transactions on Database Systems, 12 (4), (1987) 593-608
47. Polettini, S. Maximum Entropy Simulation for Microdata Protection, Statistics and Computing, 13 (4), (2003) 307-320
48. Polettini, S. and Stander, J. A Bayesian Hierarchical Model Approach to Risk Estimation in Statistical Disclosure Limitation, in (J. Domingo-Ferrer and V. Torra, eds.) Privacy in Statistical Databases 2004, Springer: New York, (2004).
49. Raghunathan, T.E., Reiter, J. P., and Rubin, D.R. Multiple Imputation for Statistical Disclosure Limitation, Journal of Official Statistics, 19, (2003) 1-16
50. Reiss, J.P. Practical Data Swapping: The First Steps, ACM Transactions on Database Systems, 9, (1984) 20-37
51. Reiter, J.P. Satisfying Disclosure Restrictions with Synthetic Data Sets, Journal of Official Statistics, 18, (2002) 531-543
52. Reiter, J.P. Inference for Partially Synthetic, Public Use Data Sets, Survey Methodology, (2003)
53. Reiter, J.P. Releasing Multiply Imputed, Synthetic Public-Use Microdata: An Illustration and Empirical Study, Journal of the Royal Statistical Society, A, (2004)
54. Rinott, Y. On Models for Statistical Disclosure Risk Estimation, UNECE Work Session on Statistical Data Confidentiality, Luxembourg, April 2003, http://www.unece.org/stats/documents/2003/04/confidentiality/wp.16.e.pdf
55. Roque, G. M.. Masking Microdata Files with Mixtures of Multivariate Normal Distributions, Ph.D. Dissertation, University of California at Riverside, (2000)
56. Sarathy, R., Muralidhar, K., and Parsa, R. Perturbing Non-Normal Attributes: The Copula Approach, Management Science, 48 (12), (2002) 1613-1627
57. Scheuren, F. and Winkler W. Regression Analysis of Data Files that are Computer Matched - Part II, Survey Methodology (1997) 157-165
58. Schlörer, J. Security of Statistical Databases: Multidimensional Transformation, ACM Transactions on Database Systems, 6, (1981) 91-112
59. Skinner, C. J. and Elliot, M. A. A Measure of Disclosure Risk for Microdata, Journal of the Royal Statistical Society, B 64 (4), (2001), 855-867
60. Skinner, C. J. and Holmes, D. J. Estimating the Re-identification Risk per Record in Microdata, Journal of Official Statistics, 14 (1998) 361-372
61. Sweeney, L. Computational Disclosure Control for Medical Microdata: The Datafly System, in Record Linkage Techniques 1997, Washington, DC: National Academy Press (1999) 442-453
62. Sweeney, L. Achieving k-Anonymity Privacy Protection Using Generalization and Suppression, International Journal of Uncertainty, Fuzziness, and Knowledge-Based Systems, 10 (5), (2002) 571-588
63. Thibaudeau, Y. and Winkler, W.E. Bayesian Networks Representations, Generalized Imputation, and Synthetic Microdata Satisfying Analytic Restraints, Statistical Research Division report RR 2002/09 at http://www.census.gov/srd/ www/byyear.html (2002)
64. Trottini, M. and Fienberg, S. E. Modelling User Uncertainty for Disclosure Risk and Data Utility, International Journal of Uncertainty, Fuzziness, and Knowledge-Based Systems, 10 (5), (2002) 511-528
65. Van Den Hout, A. and Van Der Heijden, P. G. M. Randomized Response, Statistical Disclosure Control, and Misclassification: A Review, International Statistical Review, 70 (2) (2002) 269-288
66. Willenborg, L. and De Waal, T. Statistical Disclosure Control in Practice, Vol. 111, Lecture Notes in Statistics, Springer-Verlag, New York (1996)
67. Willenborg, L. and De Waal, T. Elements of Statistical Disclosure Control, Vol. 155, Lecture Notes in Statistics, Springer-Verlag, New York (2000)
68. Winkler, W. E. Matching and Record Linkage, in B. G. Cox (ed.) Business Survey Methods, New York: J. Wiley, (1995) 355-384
69. Winkler, W. E. Re-identification Methods for Evaluating the Confidentiality of Analytically Valid Microdata, Research in Official Statistics, 1, (1998) 87-104
70. Winkler, W. E. Issues with Linking Files and Performing Analyses on the Merged Files, Proceedings of the Sections on Government Statistics and Social Statistics, American Statistical Association, (1999) 262-265
71. Winkler, W. E. Single Ranking Micro-aggregation and Re-identification, Statistical Research Division report RR 2002/08 at http://www.census.gov/srd/ www/byyear.html (2002)
72. Yancey, W.E., Winkler, W.E., and Creecy, R. H. Disclosure Risk Assessment in Perturbative Microdata Protection, in (J. Domingo-Ferrer, ed.) Inference Control in Statistical Databases, Springer: New York (2002)