Quo vadis, data privacy?

Annals of the New York Academy of Sciences

Volumn 1260, Issue 1, 2012, Pages 45-54

  Gehrke, Johannes ^a  

^a Department of Obstetrics Gynecology   (United States)

Author keywords

Data privacy; Disclosure control; Randomization

Indexed keywords

ALGORITHM; ARTICLE; COMPUTER SECURITY;

EID: 84864042694     PISSN: 00778923     EISSN: 17496632     Source Type: Book Series    
DOI: 10.1111/j.1749-6632.2012.06630.x     Document Type: Article

References (63)

1. Abowd, J.M. & F. Kramarz. 1999. Econometric analysis of linked employer-employee data. Labour Econ. 6: 53-74.
2. Abowd, J.M., F. Kramarz & D. Margolis. 1999. High wage workers and high wage firms. Econometrica 67: 251-333.
3. Abowd, J.M. & J.I. Lane. 2004. New approaches to confidentiality protection: synthetic data, remote access and research data centers. In Privacy in Statistical Databases: CASC Project International Workshop, PSD 2004. Proceedings, volume 3050 of Lecture Notes in Computer Science. J. Domingo-Ferrer & V. Torra, Eds.: 282-289. Springer-Verlag, Berlin.
4. Abowd, J.M. & L. Vilhuber. 2008. How protective are synthetic data? In Privacy in Statistical Databases. J. Domingo-Ferrer & Y. Saygin, Eds.: 239-246. Vol. 5262 of Lecture Notes in Computer Science. Springer.
5. Agrawal, R. 1999. Keynote: Data mining: crossing the chasm. In Proceedings of the 5th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD-99).
6. Anderson, M. & W. Seltzer. 2007. Challenges to the confidentiality of U.S. federal statistics, 1910-1965. J. Off. Stat. 23: 1-34.
7. Arrington, M. 2006. AOL proudly releases massive amounts of private data. TechCrunch:, August 2006.
8. Barbaro, M. & T. Zeller. 2006. A face is exposed for AOL searcher no. 4417749.
9. Battelle, J. 2005. The Search: How Google and Its Rivals Rewrote the Rules of Business and Transformed Our Culture. Portfolio Hardcover, US.
10. Bell, R., J. Bennett, Y. Koren & C. Volinsky. 2009. The million dollar programming prize. IEEE Spect. 5: 28-33.
11. Bell, R.M. & Y. Koren. 2007. Lessons from the Netflix prize challenge. SIGKDD Explor. 9: 75-79.
12. Bell, R.M., Y. Koren & C. Volinsky. 2007. Chasing $1, 000, 000: how we won the Netflix progress prize. Stat. Comput. Stat. Graph. Newslett. 18: 4-12.
13. Bennett, J. & S. Lanning. 2006. The Netflix prize. In Proceedings of the KDDCup'07.
14. Brynjolfsson, E. & A. McAfee. 2011. The Big Data Boom is the Innovation Story of Our Time. The Atlantic. Nov. 21.
15. Caiola, G. & J.P. Reiter. 2010. Random forests for generating partially synthetic, categorical data. Trans. Data Privacy 3: 27-42.
16. Chen, B.-C., D. Kifer, K. LeFevre & A. Machanavajjhala. 2009. Privacy-preserving data publishing. Foundations Trends Databases 2: 1-167.
17. Cox, L.H., S. McDonald & D. Nelson. 1986. Confidentiality issues at the U.S. Bureau of the Census. J. Offic. Stat. 2: 135-160.
18. Dalenius, T. 1977. Towards a methodology for statistical disclosure control. Statistik Tidskrift 15: 429-444.
19. Denning, D.E. 1980. Secure statistical databases with random sample queries. ACM Trans. Database Syst. 5: 291-315.
20. Domingo-Ferrer, J. & V. Torra, Eds. 2004. Privacy in Statistical Databases: CASC Project International Workshop, PSD 2004. Proceedings, volume 3050 of Lecture Notes in Computer Science. Springer, Barcelona, Spain.
21. Doyle, O., J. Lane, J. Theeuwes & L. Zayatz, Eds. 2001. Confidentiality, Disclosure and Data Access: Theory and Practical Application for Statistical Agencies. Elsevier. New York, NY.
22. Drechsler, J. & J.P. Reiter. 2011. An empirical evaluation of easily implemented, nonparametric methods for generating synthetic datasets. Comput. Stat. Data Anal. 55: 3232-3243.
23. Duncan, G.T. & D. Lambert. 1986. Disclosure-limited data dissemination. J. Am. Stat. Assoc. 81: 393: 10-18.
24. Dwork, C. 2008. Differential privacy: a survey of results. In Proceedings of the TAMC, volume 4978 of Lecture Notes in Computer Science. M. Agrawal, D.-Z. Du, Z. Duan & A. Li, Eds.: 1-19. Springer, Berlin.
25. Dwork, C. 2011. A firm foundation for private data analysis. Commun. 54: 86-95. ACM, New York.
26. Dwork, C., F. McSherry, K. Nissim & A. Smith. 2006. Calibrating noise to sensitivity in private data analysis. In Proceedings of the TCC, volume 3876 of Lecture Notes in Computer Science. S. Halevi & T. Rabin, Eds.: 265-284. Springer, Berlin.
27. Evfimievski, A.V., J. Gehrke & R. Srikant. 2003. Limiting privacy breaches in privacy preserving data mining. In Proceedings of the PODS, 211-222. ACM, New York.
28. Fellegi, I.P. 1972. On the question of statistical confidentiality. J. Am. Stat. Assoc.67: 337:7-18.
29. Fienberg, S.E. & J. Jin. 2009. Statistical disclosure limitation for data access. In Encyclopedia of Database Systems. L. Liu & M.T. Özsu, Eds.: 2783-2789. Springer, US.
30. Fienberg, S.E. & U.E. Makov. 1998. Confidentiality, uniqueness and disclosure limitation for categorical data. J. Offic. Stat. 14: 185-397.
31. Fienberg, S.E., U.E. Makov & A.P. Sanil. 1997. A bayesian approach to data disclosure: optimal intruder behavior for continuous data. J. Offic. Stat. 13(1).
32. Fienberg, S.E., U.E. Makov & R.J. Steele. 1998. Disclosure limitation using perturbation and related methods for categorical data. Journal of Official Statistics 14(4).
33. Fienberg, S.E. & J. McIntyre. 2004. Data swapping: variations on a theme by Dalenius and Reiss. In Privacy in Statistical Databases 14-29.
34. Frankowski, D., D. Cosley, S. Sen, L.G. Terveen, & J. Riedl. 2006. You are what you say: privacy risks of public mentions. In SIGIR. E.N. Efthimiadis, S.T. Dumais, D. Hawking & K. Järvelin, Eds.: 565-572. ACM.
35. Fung, B.C.M., K. Wang, R. Chen & P.S. Yu. 2010. Privacy-preserving data publishing: a survey of recent developments. ACM Comput. Surv. 42: 1-53.
36. Gehrke, J., E. Lui & R. Pass. 2011. Towards privacy for social networks: A zero-knowledge based definition of privacy. In Y. Ishai, Ed.: TCC, volume 6597 of Lecture Notes in Computer Science: 432-449. Springer.
37. Goldberg, J.P. & W.T. Moye. 1985. The First Hundred Years of the Bureau of Labor Statistics. Bureau of Labor Statistics, Bulletin 2235. Superintendent of Documents, U.S. Government Printing Office, Washington, DC 20402.
38. Götz, M., A. Machanavajjhala, G. Wang, X. Xiao & J. Gehrke. 2012. Publishing search logs - a comparative study of privacy guarantees. IEEE Trans. Knowl. Data Eng. 24: 520-532.
39. Herzog, T.N., F.J. Scheuren & W.E. Winkler. 2007. Data Quality and Record Linkage Techniques. Springer-Verlag, Berlin.
40. Homer, N., S. Szelinger, M. Redman, et al. 2008. Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density snp genotyping microarrays. PLoS Genet 4: e1000167.
41. Hundepool, A. 2004. The argus software in the casc-project. In Privacy in Statistical Databases: CASC Project International Workshop, PSD 2004. Proceedings, volume 3050 of Lecture Notes in Computer Science. J. Domingo-Ferrer & V. Torra, Eds.: 323-335. Springer-Verlag, Berlin.
42. Hundepool, A. 2006. The argus software in cenex. In Privacy in Statistical Databases, volume 4302 of Lecture Notes in Computer Science. J. Domingo-Ferrer & L. Franconi, Eds.: 334-346. Springer-Verlag, Berlin.
43. Kifer, D. & A. Machanavajjhala. 2011. No free lunch in data privacy. In Proceedings of the SIGMOD Conference. T.K. Sellis, R.J. Miller, A. Kementsietsidis & Y. Velegrakis, Eds.: 193-204. ACM, New York.
44. Kifer, D. & A. Machanavajjhala. 2012. A rigorous and customizable framework for privacy. In Proceedings of the PODS Conference.
45. Korolova, A., K. Kenthapadi, N. Mishra & A. Ntoulas. 2009. Releasing search queries and clicks privately. In WWW. J. Quemada, G. León, Y. S. Maarek & W. Nejdl, Eds.: 171-180. ACM, New York.
46. Kumar, R., J. Novak, B. Pang & A. Tomkins. 2007. On anonymizing query logs via token-based hashing. Williamson et al. 62: 629-638.
47. Lambert, D. 1993. Measures of disclosure risk and harm. J. Offic. Stat. 9: 313-331.
48. Lambert, D. 1993. Measures of disclosure risk and harm. J. Offic. Stat. 9: 313-331.
49. Lohr, S. 2012. The age of Big Data. New York Times.
50. Machanavajjhala, A., D. Kifer, J. Abowd, J. Gehrke & L. Vilhuber. 2008. Privacy: from theory to practice on the map.
51. Malin, B.A. 2005. Technical evaluation: an evaluation of the current state of genomic data privacy protection technology and a roadmap for the future. JAMIA 12: 28-34.
52. Manyika, J., M. Chui, B. Brown, et al. 2011. Big Data: The Next Frontier for Innovation, Competition, and Productivity.
53. McSherry, F.D. 2010. Privacy integrated queries: an extensible platform for privacy-preserving data analysis. Commun. 53: 9: 89-97. ACM, New York.
54. Narayanan, A. & V. Shmatikov. 2008. Robust de anonymization of large sparse datasets. In IEEE Symposium on Security and Privacy: 111-125. IEEE Computer Society.
55. United States Census Bureau. On the map (version 3): Longitudinal employer-household dynamics. Available at:. Last accessed March 1, 2012.
56. United States Census Bureau. 2012. Mission statement. Available at:. Last accessed March 1, 2012.
57. Warner, S.L. 1965. Randomized response: a survey technique for eliminating evasive answer bias. J. Am. Stat. Assoc. 60: 63-69.
58. Wikipedia. AOL search data leak. Available at:. Last accessed March 1, 2012.
59. Wikipedia. Egosurfing. Available at:. Last accessed March 1, 2012.
60. Wikipedia. Netflix prize.
61. Willenborg, L. & T. de Waal. 2001. Elements of Statistical Disclosure Control, Vol. 155 of Lecture Notes in Statistics. Springer-Verlag, Berlin.
62. Williamson, C.L., M.E. Zurko, P.F. Patel-Schneider & P.J. Shenoy, Eds. 2007. In Proceedings of the 16th International Conference on World Wide Web, WWW 2007, ACM, Banff, Alberta, Canada.
63. Yeniterzi, R., J.S. Aberdeen, S. Bayer, et al. 2010. Effects of personal identifier resynthesis on clinical text de identification. JAMIA 17: 159-168.