Data swapping: Variations on a theme by dalenius and reiss

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3050, Issue , 2004, Pages 14-29

  Fienberg, Stephen E ^a   McIntyre, Julie ^a,b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b CREST   (France)

Author keywords

Bounds table cell entries; Constrained perturbation; Contingency tables; Marginal releases; Minimal sufficient statistics; Rank swapping

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTERS;

BOUNDS TABLE CELL ENTRIES; CONSTRAINED PERTURBATION; CONTINGENCY TABLE; MARGINAL RELEASES; RANK SWAPPING; SUFFICIENT STATISTICS;

STATISTICS;

EID: 35048813475     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-25955-8_2     Document Type: Article

References (45)

1. Agrawal, R. and Srikant, R. (200). Privacy-preserving data mining. Proceedings of the 2000 IEEE Symposium on Security and Privacy, 439-450.
2. Aoki, Satoshi and Takemura, Akimichi (2003). Minimal basis for connected Markov chain over 3×3×K contingency tables with fixed two-dimensional marginals. Australian and New Zealand Journal of Statistics, 45, 229-249.
3. Bishop, Yvonne M. M., Fienberg, Stephen E., and Holland, Paul W. (1975). Discrete Multivariate Analysis: Theory and Practice. MIT Press, Cambridge, MA.
4. Burridge, Jim (2003). Information preserving statistical obfuscation. Journal of Official Statistics, 13, 321-327.
5. Carlson, Michael and Salabasis, Mickael (2002). A data-swapping technique for generating synthetic samples; A method for disclosure control. Research in Official Statistics, 5, 35-64.
6. Dalenius, Tore (1977). Towards a methodology for statistical disclosure control. Statistisk Tidskrift, 5, 429-444.
7. Dalenius, Tore (1988). Controlling Invasion of Privacy in Surveys. Statistics Sweden, Stockholm.
8. Dalenius, Tore and Reiss, Steven P. (1978). Data-swapping: A technique for disclosure control (extended abstract). American Statistical Association, Proceedings of the Section on Survey Research Methods, Washington, DC, 191-194.
9. Dalenius, Tore and Reiss, Steven P. (1982). Data-swapping: A technique for disclosure control. Journal of Statistical Planning and Inference, 6, 73-85.
10. Diaconis, Persi and Sturmfels, Bernd (1998). Algebraic algorithms for sampling From conditional distributions. Annals of Statistics, 26, 363-397.
11. Dobra, Adrian (2003). Markov bases for decomposable graphical models. Bernoulli, 9, 1-16.
12. Dobra, Adrian and Fienberg, Stephen E. (2000). Bounds for cell entries in contingency tables given marginal totals and decomposable graphs. Proceedings of the National Academy of Sciences, 97, 11885-11892.
13. Dobra, Adrian and Fienberg, Stephen E. (2001). Bounds for cell entries in contingency tables induced by fixed marginal totals. Statistical Journal of the United Nations ECE, 18, 363-371.
14. Domingo-Ferrer, Josep and Mateo-Sanz, Josep M. (1999). On resampling for statistical confidentiality in contingency tables. Computers & Mathematics with Applications, 38, 13-32.
15. Domingo-Ferrer, Josep and Torra, Vicenc (2001). Disclosure control methods and information loss for microdata. In P. Doyle, J. Lane, J. Theeuwes, and L. Zayatz (eds.): Confidentiality, Disclosure, and Data Access. Theory and Practical Applications for Statistical Agencies. North-Holland, Amsterdam, pp. 91-110.
16. Domingo-Ferrer, Josep and Torra, Vicenc (2001). A quantitative comparison of disclosure control methods for microdata. In P. Doyle, J. Lane, J. Theeuwes, and L. Zayatz (eds.): Confidentiality, Disclosure, and Data Access. Theory and Practical Applications for Statistical Agencies. North-Holland, Amsterdam, pp. 111-133.
17. Doyle, Pat, Lane, Julia I., Theeuwes, Jules J.M., and Zayatz, Laura V., eds. (2001). Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies. North-Holland, Amsterdam.
18. Duncan, George T., Fienberg, Stephen E., Krishnan, Rammaya, Padman, Rema, and Roehrig, Stephen F. (2001). Disclosure Limitation Methods and Information Loss for Tabular Data. In P. Doyle, J. Lane, J. Theeuwes, and L. Zayatz (eds.): Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies North-Holland, Amsterdam, 135-166.
19. Evfimievski, A., Gehrke, J., and Srikant, R. (2003). Limiting privacy breaches in privacy preserving data mining. Proceedings 2003 ACM PODS Symposium on Principles of Database Systems.
20. Federal Committee on Statistical Methodology (1978). Report on Statistical Disclosure and Disclosure-Avoidance Techniques. Statistical Policy Working Paper 2. Subcommittee on Disclosure-Avoidance Techniques. U.S. Department of Commerce, Washington, DC.
21. Federal Committee on Statistical Methodology (1994). Report on Statistical Disclosure Limitation Methodology. Statistical Policy Working Paper 22. Subcommittee on Disclosure Limitation Methodology. Office of Management and Budget, Executive Office of the President, Washington, DC.
22. Fienberg, Stephen E. (2002). Comment on a paper by M. Carlson and M. Salabasis: 'A data-swapping technique using ranks - A method for disclosure control.' Research in Official Statistics, 5, 65-70.
23. Fienberg, Stephen E., Makov, Udi E., Meyer, M. M., and Steele, Russell J. (2001). Computing the exact distribution for a multi-way contingency table conditional on its marginal totals. In A.K.E. Saleh (ed.,): Data Analysis from Statistical Foundations: Papers in Honor of D.A.S. Fraser, Nova Science Publishing, 145-165.
24. Fienberg, Stephen E., Steele, Russell J., and Makov, Udi E. (1996). Statistical notions of data disclosure avoidance and their relationship to traditional statistical methodology: Data swapping and loglinear models. . Proceedings of Bureau of the Census 1996 Annual Research Conference. US Bureau of the Census, Washington, DC, 87-105.
25. Fienberg, Stephen E., Steele, Russell J., and Makov, Udi E. (1998). Disclosure limitation using perturbation and related methods for categorical data (with discussion). Journal of Official Statistics, 14, 485-511.
26. Gomatam, Shanti and Karr, Alan F. (2003). Distortion measures for categorical data swapping. Technical Report 132, National Institute of Statistical Sciences, Research Triangle Park, NC.
27. Gomatam, Shanti, Karr, Alan F., and Sanil, Ashish. (2003). A risk-utility framework for categorical data swapping. Technical Report 132, National Institute of Statistical Sciences, Research Triangle Park, NC.
28. Gomatam, Shanti, Karr, Alan F., Chunhua Charlie Liu, and Sanil, Ashish. (2003). Data swapping: A risk-utility framework and web service implementation. Technical Report 134, National Institute of Statistical Sciences, Research Triangle Park, NC.
29. Gomatam, Shanti, Karr, Alan F., and Sanil, Ashish. (2004). Data swapping as a decision problem. Technical Report 140, National Institute of Statistical Sciences, Research Triangle Park, NC.
30. Gouweleeuw, J. M., Kooiman, P., Willenborg, L. C. R. J., and Wolf, P. P. de. (1998). Post randomization for statistical disclosure control: Theory and implementation. Journal of Official Statistics, 14, 463-478.
31. Griffin, R., Navarro, A., and Flores-Baez, L. (1989). Disclosure avoidance for the 1990 census. Proceedings of the Section on Survey Research, American Statistical Association, 516-521.
32. Karr, Alan F., Dobra, Adrian and Sanil, Ashish P. (2003). Table servers protect confidentiality in tabular data releases. Communications of the ACM, 46, 57-58.
33. Muralidhar, Krishnamurty and Sarathy, Rathindra (2003a). Masking numerical data: Past, present, and future. Presentation to Confidentiality and Data Access Committee of the Federal Committee on Statistical Methodology, Washington DC, April 2003.
34. Muralidhar, Krishnamurty and Sarathy, Rathindra (2003b). Access, data utility and privacy. Summary from NSF Workshop on Confidentiality, Washington DC, May 2003.
35. Moore, Richard A. (1996). Controlled data-swapping techniques for masking public use microdata sets. Statistical Research Division Report Series, RR96-04, U.S. Bureau of the Census.
36. Navarro, A., Flores-Baez, L., and Thompson, J. (1988). Results of Data Switching Simulation. Presented at the Spring meeting of the American Statistical Association and Population Statistics Census Advisory Committees.
37. Office of National Statistics (2001). 2001 census disclosure control. Memorandum AG(01)06 dataed November 27, 2001.
38. Reiss, Steven P. (1984). Practical data-swapping: The first steps. ACM Transactions on Database Systems, 9, 20-37.
39. Reiss, Steven P., Post, Mark J. and Dalenius, Tore (1982). Non-reversible privacy transformations. In Proceedings of the ACM Symposium on Principles of Database Systems, March 29-31, 1982, Los Angeles, California, pages 139-146.
40. Schlörer, Jan (1981). Security of statistical databases: multidimensional transformation ACM Transactions on Database Systems, 6, 95-112.
41. Takemura, Akamichi (2002). Local recoding and record swapping by maximum weight matching for disclosure control of microdata sets. Journal of Official Statistics, 18, 275-289.
42. Trottini, Mario (2003). Decision Models for Disclosure Limitation. Unpublished Ph.D. Dissertation, Department of Statistics, Carnegie Mellon University.
43. Warner, Stanley L. (1965). Randomized response: A survey technique for eliminating evasive answer bias. Journal of the American Statistical Association, 60, 63-69.
44. Willenborg, L. and de Waal, T. (2001). Elements of Statistical Disclosure Control, Lecture Notes in Statistics, Vol. 155, Springer-Verlag, New york.
45. Zayatz, Laura (2002). SDC in the 2000 U.S. Decennial census. In Inference Control in Statistical Databases, (ed. J. Domingo-Ferrer), 183-202, Springer-Verlag, Berlin.