A polynomial-time approximation to optimal multivariate microaggregation

Computers and Mathematics with Applications

Volumn 55, Issue 4, 2008, Pages 714-732

  Domingo Ferrer, Josep ^a   Sebé, Francesc ^a   Solanas, Agusti ^a  

^a UNIVERSITAT ROVIRA I VIRGILI   (Spain)

Author keywords

Approximation algorithms; k anonymity; Microaggregation; Microdata protection; Privacy; Statistical databases; Statistical disclosure control

Indexed keywords

DATA REDUCTION; DATABASE SYSTEMS; OPTIMIZATION; PARAMETER ESTIMATION; POLYNOMIALS; STATISTICAL METHODS;

K-ANONYMITY; MICROAGGREGATION; MICRODATA PROTECTION; PRIVACY; STATISTICAL DATABASES; STATISTICAL DISCLOSURE CONTROL;

APPROXIMATION ALGORITHMS;

EID: 37649020602     PISSN: 08981221     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.camwa.2007.04.034     Document Type: Article

References (48)

1. CASC, Computational Aspects of Statistical Confidentiality, European Project IST-2000-25069 CASC. http://neon.vb.cbs.nl/casc, 2001-2004
2. HIPAA, Health Insurance Portability and Accountability Act. http://www.hhs.gov/ocr/hipaa/, 2004
3. Boyens C., Krishnan R., and Padman R. On privacy-preserving access to distributed heterogeneous healthcare information. Proceedings of the 37th Hawaii International Conference on System Sciences HICSS-2004 (2004), IEEE Computer Society, Big Island, HI
4. EuroPrivacy, European privacy regulations. http://europa.eu.int/comm/internal_market/privacy/law_en.htm, 2005
5. USPrivacy, US privacy regulations. http://www.media-awareness.ca/english/issues/privacy/us_legislation_privacy.cfm, 2005
6. Willenborg L., and DeWaal T. Elements of Statistical Disclosure Control (2001), Springer-Verlag, New York
7. Giessing S. Survey on methods for tabular data protection in ARGUS. Privacy in Statistical Databases. In: Domingo-Ferrer J., and Torra V. (Eds). Lecture Notes in Computer Science vol. 3050 (2004), Springer, Berlin, Heidelberg 1-13
8. Schlörer J. Disclosure from statistical databases: Quantitative aspects of trackers. ACM Transactions on Database Systems 5 (1980) 467-492
9. Chin F.Y., and Ozsoyoglu G. Auditing and inference control in statistical databases. IEEE Transactions on Software Engineering 8 (1982) 574-582
10. Duncan G.T., and Mukherjee S. Optimal disclosure limitation strategy in statistical databases: Deterring tracker attacks through additive noise. Journal of the American Statistical Association 95 (2000) 720-729
11. Garfinkel R., Gopal R., and Rice D. New approaches to disclosure limitation while answering queries to a database: Protecting numerical confidential data against insider threat based on data and algorithms. Proc. of the 39th Annual Hawaii International Conference on System Sciences-HICSS 2006 (2006), IEEE Computer Society, Kauai, HI
12. Defays D., and Nanopoulos P. Panels of enterprises and confidentiality: The small aggregates method. Proc. of 92 Symposium on Design and Analysis of Longitudinal Surveys (1993), Statistics Canada, Ottawa 195-204
13. D. Pagliuca, G. Seri, Some results of the individual ranking method on the system of enterprise accounts annual survey, ESPRIT SDC Project, Deliverable MI-3/D2.11, 1999
14. Rosemann M. Erste Ergebnisse von vergleichenden Untersuchungen mit anonymisierten und nicht anonymisierten Einzeldaten am Beispiel der Kostenstrukturerhebung und der Umsatzsteuerstatistik. In: Ronning G., and Gnoss R. (Eds). Anonymisierung wirtschaftsstatistischer Einzeldaten (2003), Statistisches Bundesamt, Wiesbaden 154-183
15. R. Lenz, D. Vorgrimler, Matching German turnover tax statistics, FDZ-Arbeitspapier Nr. 4, Statistische Ämter des Bundes und der Länder-Forschungsdatenzentren, 2005
16. UNECE, United Nations Economic Commission for Europe. Questionnaire on disclosure and confidentiality - Summary of replies, in: 2nd Joint UNECE/Eurostat Work Session on Statistical Data Confidentiality, Skopje, Macedonia, 2001
17. Dalenius T. Finding a needle in a haystack - or identifying anonymous census records. Journal of Official Statistics 2 3 (1986) 329-336
18. Samarati P. Protecting respondents' identities in microdata release. IEEE Transactions on Knowledge and Data Engineering 13 6 (2001) 1010-1027
19. Domingo-Ferrer J., and Torra V. Disclosure protection methods and information loss for microdata. In: Doyle P., Lane J.I., Theeuwes J.J.M., and Zayatz L. (Eds). Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies (2001), North-Holland, Amsterdam 91-110
20. Sarathy R., Muralidhar K., and Parsa R. Perturbing non-normal confidential: The Copula approach. Management Science 48 12 (2002) 1613-1627
21. Sarathy R., and Muralidhar K. The security of confidential numerical data in databases. Information Systems Research 13 4 (2002) 389-403
22. Domingo-Ferrer J., and Torra V. A quantitative comparison of disclosure control methods for microdata. In: Doyle P., Lane J.I., Theeuwes J.J.M., and Zayatz L. (Eds). Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies (2001), North-Holland, Amsterdam 111-134
23. R. Moore, Controlled data swapping techniques for masking public use microdata sets, US Bureau of the Census, Washington DC, 1996 (unpublished manuscript)
24. Brand R. Microdata protection through noise addition. Inference Control in Statistical Databases. In: Domingo-Ferrer J. (Ed). Lecture Notes in Computer Science vol. 2316 (2002), Springer, Berlin, Heidelberg 97-116
25. Domingo-Ferrer J., and Mateo-Sanz J.M. Practical data-oriented microaggregation for statistical disclosure control. IEEE Transactions on Knowledge and Data Engineering 14 1 (2002) 189-201
26. Torra V. Microaggregation for categorical variables: A median based approach. Privacy in Statistical Databases. In: Domingo-Ferrer J., and Torra V. (Eds). Lecture Notes in Computer Science vol. 3050 (2004), Springer, Berlin, Heidelberg 162-174
27. Domingo-Ferrer J., and Torra V. Ordinal, continuous and heterogenerous k-anonymity through microaggregation. Data Mining and Knowledge Discovery 11 2 (2005) 195-212
28. Ward J.H. Hierarchical grouping to optimize an objective function. Journal of the American Statistical Association 58 (1963) 236-244
29. Edwards A.W.F., and Cavalli-Sforza L.L. A method for cluster analysis. Biometrics 21 (1965) 362-375
30. Jancey R.C. Multidimensional group analysis. Australian Journal of Botany 14 (1966) 127-130
31. J.B. MacQueen, Some methods for classification and analysis of multivariate observations, in: Proceedings of the 5th Berkeley Symposium on Mathematical Statistics and Probability, vol. 1, 1967, pp. 281-297
32. Gordon A.D., and Henderson J.T. An algorithm for Euclidean sum of squares classification. Biometrics 33 (1977) 355-362
33. Hansen P., Jaumard B., and Mladenovic N. Minimum sum of squares clustering in a low dimensional space. Journal of Classification 15 (1998) 37-55
34. Oganian A., and Domingo-Ferrer J. On the complexity of optimal microaggregation for statistical disclosure control. Statistical Journal of the United Nations Economic Comission for Europe 18 4 (2001) 345-354
35. Hansen S.L., and Mukherjee S. A polynomial algorithm for optimal univariate microaggregation. IEEE Transactions on Knowledge and Data Engineering 15 4 (2003) 1043-1044
36. Defays D., and Anwar N. Micro-aggregation: A generic method. Proceedings of the 2nd International Symposium on Statistical Confidentiality (1995), Eurostat, Luxemburg 69-78
37. Sande G. Exact and approximate methods for data directed microaggregation in one or more dimensions. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems 10 5 (2002) 459-476
38. A. Hundepool, A. Van de Wetering, R. Ramaswamy, L. Franconi, A. Capobianchi, P.-P. DeWolf, J. Domingo-Ferrer, V. Torra, R. Brand, S. Giessing, μ-ARGUS Version 4.0.2 Software and User's Manual, Statistics Netherlands, Voorburg, NL. http://neon.vb.cbs.nl/casc, 2005
39. Laszlo M., and Mukherjee S. Minimum spanning tree partitioning algorithm for microaggregation. IEEE Transactions on Knowledge and Data Engineering 17 7 (2005) 902-911
40. P. Samarati, L. Sweeney, Protecting privacy when disclosing information: k-anonymity and its enforcement through generalization and suppression, Tech. Rep., SRI International, 1998
41. Sweeney L. Achieving k-anonymity privacy protection using generalization and suppression. International Journal of Uncertainty, Fuzziness and Knowledge Based Systems 10 5 (2002) 571-588
42. Sweeney L. k-anonimity: A model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge Based Systems 10 5 (2002) 557-570
43. G. Aggarwal, T. Feder, K. Kenthapadi, R. Motwani, R. Panigrahy, D. Thomas, A. Zhu, Approximation algorithms for k-anonymity, Journal of Privacy Technology, Paper No. 20051120001. http://www.jopt.org/papers.html, 2005
44. R. Brand, J. Domingo-Ferrer, J.M. Mateo-Sanz, Reference data sets to test and compare SDC methods for protection of numerical microdata, European Project IST-2000-25069 CASC. http://neon.vb.cbs.nl/casc, 2002
45. Domingo-Ferrer J., Mateo-Sanz J.M., and Torra V. Comparing SDC methods for microdata on the basis of information loss and disclosure risk. Pre-proceedings of ETK-NTTS'2001 vol. 2 (2001), Eurostat, Luxemburg 807-826
46. Dandekar R., Domingo-Ferrer J., and Sebé F. LHS-based hybrid microdata vs rank swapping and microaggregation for numeric microdata protection. Inference Control in Statistical Databases. In: Domingo-Ferrer J. (Ed). Lecture Notes in Computer Science vol. 2316 (2002), Springer, Berlin, Heidelberg 153-162
47. Yancey W.E., Winkler W.E., and Creecy R.H. Disclosure risk assessment in perturbative microdata protection. In: Domingo-Ferrer J. (Ed). Inference Control in Statistical Databases. Lecture Notes in Computer Science vol. 2316 (2002), Springer, Berlin, Heidelberg 135-152
48. Domingo-Ferrer J., and Sebé F. Optimal multivariate 2-microaggregation for microdata protection: A 2-approximation. In: Domingo-Ferrer J., and Franconi L. (Eds). Privacy in Statistical Databases-PSD 2006. Lecture Notes in Computer Science vol. 4302 (2006), Springer, Berlin, Heidelberg 129-138