Statistical confidentiality: Optimization techniques to protect tables

Computers and Operations Research

Volumn 35, Issue 5, 2008, Pages 1638-1651

  Salazar González, Juan José ^a  

^a UNIVERSIDAD DE LA LAGUNA   (Spain)

Author keywords

Cell suppression; Integer programming; Rounding; Statistical disclosure limitation

Indexed keywords

INFORMATION MANAGEMENT; INTEGER PROGRAMMING; OPTIMIZATION; PROBLEM SOLVING; SECURITY OF DATA; STATISTICAL METHODS;

CELL SUPPRESSION; NEAR OPTIMAL SOLUTIONS; ROUNDING; STATISTICAL DISCLOSURE LIMITATION;

DATA ACQUISITION;

EID: 34748897771     PISSN: 03050548     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cor.2006.09.007     Document Type: Article

References (93)

1. Doyle P, Lane J, Theeuwes J, Zayatz L, editors, Confidentiality, disclosure and data access: theory and practical applications for statistical agencies, Amsterdam: Elsevier Science; 2001.
2. Willenborg LCRJ, De Waal T. Statistical disclosure control in practice. Lecture notes in statistics, vol. 111, Springer; Berlin: 1996.
3. Willenborg LCRJ, De Waal T. Elements of statistical disclosure control. Lecture notes in statistics, vol. 155, Springer; Berlin: 2001.
4. Hurkens C.A.J., and Tiourine S.R. Models and methods for the microdata protection problem. Journal of Official Statistics 14 4 (1998) 437-447
5. Cox L.H. Linear sensitivity measures and statistical disclosure control. Journal of Statistical Planning and Inference 5 (1981) 153-164
6. Domingo-Ferrer J., and Torra V. A critique of the sensitivity rules usually employed for statistical table protection. International Journal of Uncertainty Fuzziness and Knowledge-Based Systems 10 5 (2002) 545-556
7. Fellegi I.P. On the question of statistical confidentiality. Journal of the American Statistical Association 67 (1972) 7-18
8. Dalenius T. The invasion of privacy problem and statistics production. An overview. Statistik Tidskrift 12 (1974) 213-225
9. Felsö F., Theeuwes J., and Wagner G.G. Disclosure limitation methods in use: results of a survey. In: Doyle P., Lane J., Theeuwes J., and Zayatz L. (Eds). Confidentiality, disclosure and data access: theory and practical applications for statistical agencies (2001), Elsevier Science, Amsterdam
10. Trottini M. A decision-theoretic approach to data disclosure problem. Research in Official Statistics 4 (2001) 7-22
11. Cox L.H. Suppression methodology and statistical disclosure control. Journal of the American Statistical Association 75 (1980) 377-385
12. Sande G. Automated cell suppression to preserve confidentiality of business statistics. Statistical Journal of the United Nations ECE 2 (1984) 33-41
13. Robertson DA, Ethier R. Cell suppression: experience and theory. In: Domingo-Ferrer J, editor, Inference control in statistical databases. Lecture notes in computer science, vol. 2316, 2002, p. 8-20.
14. Kelly JP. Confidentiality protection in two and three-dimensional tables. PhD dissertation, University of Maryland, College Park, MD, 1990.
15. Kelly J.P., Golden B.L., and Assad A.A. Cell suppression: disclosure protection for sensitive tabular data. Networks 22 (1992) 397-417
16. Castro J. Network flows heuristics for complementary cell suppression: an empirical evaluation and extensions. In: Domingo-Ferrer J. (Ed.), Inference control in statistical databases. Lecture notes in computer science, vol. 2316, 2002, p. 59-73.
17. Castro J. A fast network flows heuristic for cell suppression in positive tables. In: Domingo-Ferrer J, Torra V, editors, Privacy in statistical databases. Lecture notes in computer science, vol. 3050, 2004, p. 136-48.
18. Castro J. A shortest paths heuristic for statistical disclosure control in positive tables. INFORMS Journal on Computing, 2006, to appear.
19. De Silets L, Golden BL, Kumar R, Wang Q. A neural network model for cell suppression of tabular data. Proceeding of the international joint conference on neural networks, vol. III, Baltimore, Maryland, 1992, p. 203-214.
20. Almeida MT, Schütz G, Carvalho FD. Statistical disclosure control: a genetic-based approach. Technical report, Centro de Investigaçao Operacional, Lisbon, 2005.
21. Chu P.C. Cell suppression methodology: the importance of suppressing marginal totals. IEEE Transactions on Knowledge and Data Engineering 9 4 (1997) 513-523
22. Gusfield D. A graph theoretic approach to statistical data security. SIAM Journal on Computing 17 (1988) 552-571
23. Kao M.Y., and Gusfield D. Efficient detection and protection of information in cross tabulated tables I: linear invariant test. SIAM Journal on Discrete Mathematics 6 3 (1993) 460-476
24. Kao M.Y. Data security equals graph connectivity. SIAM Journal on Discrete Mathematics 9 (1996) 87-100
25. Eswaran K.P., and Tarjan R.E. Augmentation problems. SIAM Journal on Computing 5 4 (1976) 653-665
26. Frederickson G.N., and Ja'Ja J. Approximation algorithms for several graph augmentation problems. SIAM Journal on Computing 10 2 (1981) 270-283
27. Gusfield D. Optimal mixed graph augmentation. SIAM Journal on Computing 16 4 (1987) 599-612
28. Fischetti M., and Salazar J.J. Models and algorithms for the 2-dimensional cell suppression problem in statistical disclosure control. Mathematical Programming 84 (1999) 283-312
29. Carvalho F.D., Dellaert N.P., and Osório M.S. Statistical disclosure in two-dimensional tables: general tables. Journal of the American Statistical Association 89 (1994) 1547-1557
30. Cox L.H. Network models for complementary cell suppression. Journal of the American Statistical Association 90 (1995) 1453-1462
31. Carvalho F.D., and Almeida M.T. Lower-bounding procedures for the 2-dimensional cell suppression problem. European Journal of Operational Research 123 (2000) 29-41
32. Almeida M.T., and Carvalho F.D. Exact disclosure prevention in 2-dimensional statistical tables. Computers & Operations Research 32 (2005) 2919-2936
33. Carvalho FD, Almeida MT. An integer approach for the cell suppression problem in two-dimensional statistical tables. Technical report #3-05, Centro de Investigaçao Operacional, Lisbon, 2005.
34. Duncan G.T., Fienberg S.E., Krishnan R., Padman R., and Roehrig S.F. Disclosure limitation methods and information loss for tabular data. In: Doyle P., Lane J., Theeuwes J., and Zayatz L. (Eds). Confidentiality, disclosure and data access: theory and practical applications for statistical agencies (2001), Elsevier Science, Amsterdam
35. Dobra A., and Fienberg S.E. Bounds for cell entries in contigency tables given marginal totals and decomposable graphs. Proceedings of the National Academy of Sciences of the USA 97 (2000) 11885-11892
36. Geurts J. Heuristics for cell suppression in tables. Technical report, Netherlands Central Bureau of Statistics, Voorburg, 1992.
37. Irving R.W., and Jerrum M.R. Three-dimensional statistical data security problems. SIAM Journal on Computing 23 1 (1994) 170-184
38. Dellaert N.P., and Luijten W.A. Statistical disclosure in general three-dimensional tables. Statistica Neerlandica 53 (1999) 197-221
39. Fischetti M., and Salazar J.J. Solving the cell suppression problem on tabular data with linear constraints. Management Science 47 7 (2001) 1008-1026
40. De Wolf PP. HiTaS: a heuristic approach to cell suppression in hierarchical tables. In: Domingo-Ferrer J, editor, Inference control in statistical databases. Lecture notes in computer science, vol. 2316, 2002, p. 74-82.
41. Chowdhury S.D., Duncan G.T., Krishnan R., Roehrig S.F., and Mukherjee S. Disclosure detection in multivariate categorical databases: auditing confidentiality protection through two new matrix operators. Management Science 45 (1999) 1710-1723
42. Roehrig SF, Padman R, Krishnan R, Duncan GT. Exact and heuristic methods for cell suppression in multi-dimensional linked tables. Technical report, 2004.
43. Salazar J.J. Mathematical models for applying cell suppression methodology in statistical data protection. European Journal of Operational Research 154 (2004) 740-754
44. Buzzigoli L, Giusti A. An algorithm to calculate the lower and upper bounds of the elements of an array given its marginals. Proceedings of the statistical data protection conference, 1998, p. 131-47.
45. Dobra A., and Fienberg S.E. Bounds for cell entries in contingency tables induced by fixed marginal totals. Statistical Journal of the United Nations ECE 18 (2001) 363-371
46. Cox LH. Bounds on entries in 3-dimensional contingency tables subject to given marginal totals. In: Domingo-Ferrer J, editor, Inference control in statistical databases, Lecture notes in computer science, vol. 2316, 2002, p. 21-33.
47. Dobra A., Fienberg S.E., and Trottini M. Assessing the risk of disclosure of confidential categorical data. In: Bernardo J.M., Bayarri M.J., Berger J.O., Dawid A.P., Heckerman D., Smith A.F.M., and West M. (Eds). Bayesian statistics vol. 7 (2003), Oxford University Press, Oxford
48. Dobra A., Karr A.F., and Sanil A.P. Preserving confidentiality of high-dimensional tabulated data: statistical and computational issues. Statistics & Computing 13 4 (2003) 363-370
49. Karr A.F., Dobra A., Sanil A.P., and Fienberg S.E. Software systems for tabular data releases. International Journal on Uncertainty Fuzziness and Knowledge-based Systems 10 5 (2002) 529-544
50. Moravek J., and Vlach M. On necessary conditions for the existence of the solution to the multi-index transportation problem. Operations Research 15 (1967) 542-545
51. Vlach M. Conditions for the existence of solutions of the three-dimensional planar transportation problem. Discrete Applied Mathematics 13 (1986) 61-78
52. Fellegi I.P. Controlled random rounding. Survey Methodology 1 (1975) 123-133
53. Bacharach M. Matrix rounding problem. Management Science 9 (1966) 732-742
54. Dalenius T. A simple procedure for controlled rounding. Statistisk Tidskrift 3 (1981) 202-208
55. Cox L.H., and Ernst L.R. Controlled rounding. INFOR 20 (1982) 423-432
56. Ahuja R.K., Magnanti T.L., Orlin J.B., and Reddy M.R. Applications of network optimization. In: Ball M.O., Magnanti T.L., Monma C.L., and Nemhauser G.L. (Eds). Handbooks in operations research & management science vol. 7 (1995), Elsevier, North-Holland, Amsterdam 1-83
57. Causey B.D., Cox L.H., and Ernst L.R. Applications of transportation theory to statistical problems. Journal of the American Statistical Association 80 (1985) 903-909
58. Cox L.H., and George J.A. Controlled rounding for tables with subtotals. Annals of Operations Research 20 (1989) 141-157
59. Kelly J.P., Assad A.A., and Golden B.L. The controlled rounding problem: relaxations and complexity issues. OR Specktrum 12 (1990) 129-138
60. Kelly J.P., Golden B.L., Assad A.A., and Baker E.K. Controlled rounding of tabular data. Operations Research 38 (1990) 760-772
61. Fagan JT, Greenberg BV, Hemmig R. Controlled rounding of three dimensional tables. Bureau of the Census, Technical report census/SRD/RR-88/02, 1988.
62. Kelly J.P., Golden B.L., and Assad A.A. Using simulated annealing to solve controlled rounding problems. ORSA Journal on Computing 2 (1990) 174-185
63. Kelly J.P., Golden B.L., and Assad A.A. Large-scale controlled rounding using TABU search with strategic oscillation. Annals of Operations Research 41 (1993) 69-84
64. Kelly J.P., Golden B.L., and Assad A.A. The controlled rounding problem: complexity and computational experience. European Journal of Operational Research 65 (1993) 207-217
65. Fischetti M., and Salazar J.J. Computational experience with the controlled rounding problem in statistical disclosure control. Journal of Official Statistics 14 4 (1998) 553-565
66. Salazar J.J. Controlled rounding and cell perturbation: statistical disclosure limitation methods for tabular data. Mathematical Programming 105 (2006) 583-603
67. Salazar JJ, Lowthian P, Young C, Merola G, Bond S, Brown D. Getting the best results in controlled rounding with the least effort. In: Domingo-Ferrer J, Torra V, editors, Privacy in statistical databases. Lecture notes in computer science, vol. 3050, 2004, p. 58-72.
68. Salazar JJ, Bycroft C, Toniolo A. The controlled rounding implementation. Monographs of official statistics, Eurostat, 2005.
69. Salazar JJ, Schoch M. A new tool for applying controlled rounding to a statistical table in microsoft excel. In: Domingo-Ferrer J, Torra, V, editors, Privacy in statistical databases, Lecture notes in computer science, vol. 3050, 2004, p. 44-57.
70. Cox L.H. A constructive procedure for unbiased controlled rounding. Journal of the American Statistical Association 82 (1987) 520-524
71. Salazar JJ. A New Approach to Round Tabular Data. In: Domingo-Ferrer J, Franconi L, editors, PSD 2006. Lecture Notes in Computer Science, vol. 4302, 2006, p. 25-34.
72. Evans T., Zayatz L., and Slanta J. Using noise for disclosure limitation of establishment tabular data. Journal of Official Statistics 14 4 (1998) 537-551
73. Fienberg S.E., Makov U.E., and Steele R.J. Disclosure limitation using perturbation and related methods for categorical data. Journal of Official Statistics 14 4 (1998) 485-502
74. Muralidhar K., and Sarathy R. A theoretical basis for perturbation methods. Statistics and Computing 13 (2003) 329-335
75. Fienberg SE, Steele RJ, Makov UE. Statistical notions of data disclosure avoidance and their relationship to traditional statistical methodology: data swapping and log-linear models. Proceedings of bureau of the census 1996 annual research conference, Washington, DC, 1996.
76. Dalenius T., and Reiss S.P. Data-swapping: a technique for disclosure control. Journal of Statistical Planning and Inference 6 (1982) 73-85
77. Duncan GT, Fienberg SE. Obtaining information while preserving privacy: a Markov perturbation method for tabular data. Proceedings of the statistical data protection conference, 1998, p. 351-62.
78. Duncan GT, Roehrig S. Cyclic perturbation: protecting confidentiality while preserving data utility in tabular data. Technical report, 2004.
79. Fischetti M., and Salazar J.J. Partial cell suppression: a new methodology for statistical disclosure control. Statistics and Computing 13 1 (2003) 13-21
80. Salazar J.J. A unified mathematical programming framework for different statistical disclosure limitation methods. Operations Research 53 (2005) 819-829
81. Dandekar RA, Cox LH. Synthetic tabular data: an alternative to complementary cell suppression for disclosure limitation of tabular data. Technical report, 2002.
82. Dandekar RA. Cost effective implementation of synthetic tabulation (a.k.a. controlled tabular adjustments) in legacy and new statistical data publication systems. Joint ECE/Eurostat work session on statistical data confidentiality, Luxembourg, 2003.
83. Dandekar RA. Maximum utility-minimum information loss table server design for statistical disclosure control of tabular data. In: Domingo-Ferrer J, Torra V, editors, Privacy in statistical databases, Lecture notes in computer science, vol. 3050, 2004, p. 121-35.
84. Cox LH, Kelly JP, Patil R. Balancing quality and confidentiality for multivariate tabular data. In: Domingo-Ferrer J, Torra V, editors, Privacy in statistical databases, Lecture notes in computer science, vol. 3050, 2004, p. 87-98.
85. Wang X, Golden B, Wasil E. Achieving controlled tabular adjustment using genetic algorithms. INFORMS computing society conference, Annapolis, January 2005.
86. Castro J. Computational experiments with minimum-distance controlled perturbation methods. In: Domingo-Ferrer J, Torra V, editors, Privacy in statistical databases, Lecture notes in computer science, vol. 3050, 2004, p. 73-86.
87. Castro J. Quadratic interior-point methods in statistical disclosure control. Computational Management Science 2 (2005) 107-121
88. Castro J. Minimum-distance controlled perturbation methods for large-scale tabular data protection. European Journal of Operational Research 171 (2006) 39-52
89. De Loera J., and Onn S. The complexity of three-way statistical tables. SIAM Journal on Computing 33 (2004) 819-836
90. Hosten S., and Sullivant S. Gröbner bases and polyhedral geometry of reducible and cyclic models. Journal of Combinatorial Theory A 100 (2002) 277-301
91. Gopal R., Goes P., and Garfinkel R. Interval protection of confidential information in a database. INFORMS Journal on Computing 10 (1998) 309-322
92. Garfinkel R., Gopal R., and Goes P. Privacy protection of binary confidential data against deterministic, stochastic, and insider threat. Management Science 48 (2002) 749-764
93. Gopal R., Garfinkel R., and Goes P. Confidentiality via camouflage: the CVC approach to disclosure limitation when answering queries to databases. Operations Research 50 (2002) 501-516