Against classification attacks: A decision tree pruning approach to privacy protection in data mining

Operations Research

Volumn 57, Issue 6, 2009, Pages 1496-1509

  Li, Xiao Bai ^a   Sarkar, Sumit ^b  

^a UNIVERSITY OF MASSACHUSETTS LOWELL   (United States)

^b UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CATEGORICAL ATTRIBUTES; CLASSIFICATION TECHNIQUE; COLLECTIVE BEHAVIOR; CONFIDENTIAL DATA; DATA UTILITIES; DISCLOSURE RISK; EXPERIMENTAL STUDIES; KEY COMPONENT; OPTIMAL PRUNING; PRIVACY PROTECTION; PRIVATE INFORMATION; REAL WORLD DATA; SWAPPING PROCEDURE;

DATA PRIVACY; DECISION TREES;

CLASSIFICATION (OF INFORMATION);

EID: 73649136135     PISSN: 0030364X     EISSN: 15265463     Source Type: Journal    
DOI: 10.1287/opre.1090.0702     Document Type: Article

References (43)

1. Adam, N. R., J. C. Wortmann. 1989. Security-control methods for statistical databases: A comparative study. ACM Comput. Surveys 21(4) 515-556.
2. Agrawal, R., R. Srikant. 2000. Privacy-preserving data mining. Proc. 2000 ACM SIGMOD Internat. Conf. Management of Data, Dallas, 439-450.
3. Berndt, E. R. 1991. The Practice of Econometrics. Addison-Wesley, New York.
4. Breiman, L., J. H. Friedman, R. A. Olshen, C. J. Stone. 1984. Classification and Regression Trees. Wadsworth, Belmont, CA.
5. Cox, L. H. 1980. Suppression methodology and statistical disclosure control. J. Amer. Statist. Assoc. 75(370) 377-385.
6. Dalenius, T., S. P. Reiss. 1982. Data swapping: A technique for disclosure control. J. Statist. Planning Inference 6(1) 73-85.
7. Denning, D. E., J. Schlörer. 1983. Inference control for statistical databases. Computer 16(7) 69-82.
8. Detrano, R., A. Janosi, W. Steinbrunn, M. Pfisterer, J. Schmid, S. Sandhu, K. Guppy, S. Lee, V. Froelicher. 1989. International application of a new probability algorithm for the diagnosis of coronary artery disease. Amer. J. Cardiology 64 304-310.
9. Duda, R. O., P. E. Hart, D. G. Stork. 2001. Pattern Classification. John Wiley & Sons, New York.
10. Duncan, G. T., D. Lambert. 1989. The risk of disclosure for microdata. J. Bus. Econom. Statist. 7(2) 201-217.
11. Estivill-Castro, V., L. Brankovic. 1999. Data swapping: Balancing privacy against precision in mining for logic rules. M. Mukesh, A. M. Tjoa, eds. Data Warehousing and Knowledge Discovery. Springer, Berlin, 389-398.
12. Fu, Z., B. L. Golden, S. Lele, S. Raghavan, E. A. Wasil. 2003a. Genetically engineered decision trees: Population diversity produces smarter trees. Oper. Res. 51(6) 894-907.
13. Fu, Z., B. L. Golden, S. Lele, S. Raghavan, E. A. Wasil. 2003b. A genetic algorithm-based approach for building accurate decision trees. INFORMS J. Comput. 15(1) 3-22.
14. Fu, Z., B. L. Golden, S. Lele, S. Raghavan, E. A. Wasil. 2006. Diversification for better classification trees. Comput. Oper. Res. 33(11) 3185-3202.
15. Fung, B. C. M., K. Wang, P. S. Yu. 2007. Anonymizing classification data for privacy preservation. IEEE Trans. Knowledge Data Engrg. 19(5) 711-725.
16. Galletta, D. 2004. MIS faculty salary survey results. Retrieved March 2004, http://www.pitt.edu/~galletta.
17. Garfinkel, R., R. Gopal, P. Goes. 2002. Privacy protection of binary confidential data against deterministic, stochastic, and insider threat. Management Sci. 48(6) 749-764.
18. Gopal, R., R. Garfinkel, P. Goes. 2002. Confidentiality via camouflage: The CVC approach to disclosure limitation when answering queries to databases. Oper. Res. 50(3) 501-516.
19. Greengard, S. 1996. Privacy: Entitlement or illusion? Personnel J. 75(5) 74-88.
20. Kullback, S. 1959. Information Theory and Statistics. John Wiley & Sons, New York.
21. Lerman, C., J. W. Molyneaux, S. Pangemanan, Iswarati. 1991. The determinants of contraceptive method and service point choice. Secondary Analysis of the 1987 National Indonesia Contraceptive Prevalence Survey, Volume I: Fertility and Family Planning. East-West Population Institute, Jakarta, Indonesia.
22. Li, X.-B., S. Sarkar. 2006a. Privacy protection in data mining: A perturbation approach for categorical data. Inform. Systems Res. 17(3) 254-270.
23. Li, X.-B., S. Sarkar. 2006b. A tree-based data perturbation approach for privacy-preserving data mining. IEEE Trans. Knowledge Data Engrg. 18(9) 1278-1283.
24. Li, X.-B., J. Sweigart, J. Teng, J. Donohue, L. Thombs. 2002. A dynamic programming based pruning method for decision trees. INFORMS J. Comput. 13(4) 332-344.
25. Lindell, Y, B. Pinkas. 2002. Privacy preserving data mining. J. Cryptology 15(3) 177-206.
26. Liu, K., H. Kargupta, J. Ryan. 2006. Random projection-based multiplicative data perturbation for privacy preserving distributed data mining. IEEE Trans. Knowledge Data Engrg. 18(1) 92-106.
27. Machanavajjhala, A., J. Gehrke, D. Kifer, M. Venkitasubramaniam. 2006. l-diversity: Privacy beyond k-anonymity. Proc. 22nd IEEE Internat. Conf. Data Engrg. (ICDE 2006). IEEE Computer Science Society, Washington, DC, 24-35.
28. Nunez, M. A., R. S. Garfinkel, R. D. Gopal. 2007. Stochastic protection of confidential information in databases: A hybrid of data perturbation and query restriction. Oper. Res. 55(5) 890-908.
29. Osei-Bryson, K.-M. 2007. Post-pruning in decision tree induction using multiple performance measures. Comput. Oper Res. 34(11) 3331-3345.
30. Piatetsky-Shapiro, G., D. E. O'Leary, S. Bonorris, W. Klosgen, Y.-T. Khaw, H.-Y. Lee, W. Ziarko. 1995. Knowledge discovery in personal data vs. privacy: A mini-symposium. IEEE Expert 10(2) 46-59.
31. Quinlan, J. R. 1993. C4.5: Programs for Machine Learning. Morgan Kaufmann, San Mateo, CA.
32. Reiss, S. P. 1984. Practical data-swapping: The first steps. ACM Trans. Database Systems 9(1) 20-37.
33. Salazar-González, J.-J. 2005. A unified mathematical programming framework for different statistical disclosure limitation methods. Oper. Res. 53(5) 819-829.
34. Samarati, P. 2001. Protecting respondents' identities in microdata release. IEEE Trans. Knowledge Data Engrg. 13(6) 1010-1027.
35. Seifert, J. W. 2006. Data mining and homeland security: An overview. CRS Report for Congress, January 27. Retrieved July 2006, http://www.fas.org/sgp/ crs/intel/RL31798.pdf.
36. Sweeney, L. 2002. k-Anonymity: A model for protecting privacy. Internat. J. Uncertainty, Fuzziness Knowledge-Based Systems 10(5) 557-570.
37. Teltzrow, M., A. Kobsa. 2004. Impacts of user privacy preferences on personalized systems: A comparative study. Designing Personalized User Experiences in eCommerce. Kluwer, Dordrecht, The Netherlands, 315-332.
38. Torgo, L. 1996. Housing data. Retrieved January 2006, http://www.cs.waikato.ac.nz/ml/weka/.
39. Traub, J. F., Y. Yemini, H. Wozniakowski. 1984. The statistical security of a statistical database. ACM Trans. Database Systems 9(4) 672-679.
40. U.S. General Accounting Office. 2004. Data mining: Federal efforts cover a wide range of uses. Retrieved May 2006, http://www.gao.gov/new.items/d04548. pdf.
41. Verykios, V. S., A. K. Elmagarmid, E. Bertino, Y. Saygin, E. Dasseni. 2004. Association rule hiding. IEEE Trans. Knowledge Data Engrg. 16(4) 434-447.
42. Witten, I. H., E. Frank. 2000. Data Mining: Practical Machine Learning Tools and Techniques with Java Implementations. Morgan Kaufmann, San Francisco.
43. Zeller, T. 2006. AOL executive quits after posting of search data. Internat. Herald Tribune (August 23) 13.