Protecting privacy against record linkage disclosure: A bounded swapping approach for numeric data

Information Systems Research

Volumn 22, Issue 4, 2011, Pages 774-789

  Li, Xiao Bai ^a   Sarkar, Sumit ^b  

^a UNIVERSITY OF MASSACHUSETTS LOWELL   (United States)

^b UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

Data partitioning; Data swapping; Privacy; Record linkage

Indexed keywords

EID: 84865106994     PISSN: 10477047     EISSN: 15265536     Source Type: Journal    
DOI: 10.1287/isre.1100.0289     Document Type: Article

References (47)

1. Adam, N. R., J. C. Wortmann. 1989. Security-control methods for statistical databases: A comparative study. ACM Comput. Surveys 21(4) 515-556.
2. Al-Lawati, A., D. Lee, P. McDaniel. 2005. Blocking-aware private record linkage. Proc. 2nd Internat. Workshop on Information Quality in Information Systems (IQIS), ACM Press, New York, 59-68.
3. Boruch, R. F., T. Victor, J. S. Cecil. 2000. Resolving ethical and legal problems in randomized experiments. Crime Delinquency 46(3) 330-353.
4. Bradley, P. S., U. M. Fayyad, O. L. Mangasarian. 1999. Mathematical programming for data mining: Formulations and challenges. INFORMS J. Comput. 11(3) 217-238.
5. Brand, R., J. Domingo-Ferrer, J. M. Mateo-Sanz. 2002. Reference data sets to test and compare SDC methods for protection of numerical microdata. Retrieved July 1, 2006, http://neon.vb.cbs.nl/casc/.
6. Churches, T., P. Christen. 2004. Some methods for blindfolded record linkage. BMC Medical Informatics Decision Making 4(9) 17.
7. Cox, L. H. 1995. Network models for complementary cell suppression. J. Amer. Statist. Assoc. 90(432) 1453-1462.
8. Cox, L. H., R. F. Boruch. 1988. Record linkage, privacy and statistical policy. J. Official Statist. 4(1) 3-16.
9. Defays, D., P. Nanopoulos. 1993. Panels of enterprises and confidentiality: The small aggregates method. Proc. Statist. Canada Sympos. 1992 Design Anal. Longitudinal Surveys, Ottawa, ON, Canada, 195-204.
10. Domingo-Ferrer, J., J. M. Mateo-Sanz. 2002. Practical data-oriented microaggregation for statistical disclosure control. IEEE Trans. Knowledge Data Engrg. 14(1) 189-201.
11. Domingo-Ferrer, J., V. Torra. 2001. A quantitative comparison of disclosure control methods for microdata. P. Doyle, J. Lane, J. Theeuwes, L. Zayatz, eds. Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies. North-Holland, Amsterdam, 111-134.
12. Duncan, G. T., S. Mukherjee. 2000. Optimal disclosure limitation strategy in statistical databases: Deterring tracker attacks through additive noise. J. Amer. Statist. Assoc. 95(451) 720-729.
13. Fellegi, I. P. 1997. Record linkage and public policy-A dynamic evolution. W. Alvey, B. Jamerson, eds. Record Linkage Techniques-1997. Proc. Internat. Workshop Exposition, Federal Committee, Washington, DC, 3-12.
14. Fellegi, I. P., A. B. Sunter. 1969. A theory for record linkage. J. Amer. Statist. Assoc. 64(328) 1183-1210.
15. Friedman, J. H., J. L. Bentley. 1977. An algorithm for finding best matches in logarithmic expected time. ACM Trans. Math. Software 3(3) 209-226.
16. Galletta, D. 2004. MIS faculty salary survey results. Retrieved March 1, http://www.pitt.edu/~galletta/salsurv.html.
17. Garfinkel, R., R. Gopal, S. Thompson. 2007. Releasing individually identifiable microdata with privacy protection against stochastic threat: An application to health information. Inform. Systems Res. 18(1) 23-41.
18. Graybill, F. A. 1976. Theory and Application of the Linear Model. Wadsworth, Pacific Grove, CA.
19. Greene, W. H. 1993. Econometric Analysis. Macmillan, New York.
20. Hansen, S. L., S. Mukherjee. 2003. A polynomial algorithm for optimal univariate microaggregation. IEEE Trans. Knowledge Data Engrg. 15(4) 1043-1044.
21. Hundepool, A., L. Willenborg. 1996. μ-and τ-ARGUS: Software for statistical disclosure control. Proc. 3rd Internat. Seminar Statist. Confidentiality, Bled, Slovenia.
22. Johnson, R. A., D. W. Wichern. 2002. Applied Multivariate Statistical Analysis. Prentice Hall, Upper Saddle River, NJ.
23. KDnuggets. 2006. Google subpoena: Child protection vs. privacy. Retrieved July 1, http://www.kdnuggets.com/polls/2006/google_subpoena.htm.
24. Laszlo, M., S. Mukherjee. 2005. Minimum spanning tree partitioning algorithm for microaggregation. IEEE Trans. Knowledge Data Engrg. 17(7) 902-911.
25. Li, X.-B., S. Sarkar. 2006a. A tree-based data perturbation approach for privacy-preserving data mining. IEEE Trans. Knowledge Data Engrg. 18(9) 1278-1283.
26. Li, X.-B., S. Sarkar. 2006b. Privacy protection in data mining: A perturbation approach for categorical data. Inform. Systems Res. 17(3) 254-270.
27. Liew, C. K., U. J. Choi, C. J. Liew. 1985. A data distortion by probability distribution. ACM Trans. Database Systems 10(3) 395-411.
28. Lindell, Y., B. Pinkas. 2002. Privacy preserving data mining. J. Cryptology 15(3) 177-206.
29. Machanavajjhala, A., J. Gehrke, D. Kifer, M. Venkitasubramaniam. 2006. l-diversity: Privacy beyond k-anonymity. Proc. 22nd IEEE Internat. Conf. Data Engrg. (ICDE 2006), IEEE Computer Science Society, Washington, DC, 24-35.
30. MacQueen, J. B. 1967. Some methods for classification and analysis of multivariate observations. Proc. 5th Berkeley Sympos. Math. Statist. Probab. Berkeley, CA, 281-297.
31. Mitchell, T. M. 1997. Machine Learning. McGraw-Hill, New York.
32. Moore, R. A. 1996. Controlled data swapping for masking public use microdata sets. Statistical Research Division Report, Series RR96/04, U.S. Census Bureau, Washington, DC.
33. Newcombe, H. B., J. M. Kennedy. 1962. Record linkage: Making maximum use of the discriminating power of identifying information. Comm. ACM 5(13) 563-566.
34. Newcombe, H. B., J. M. Kennedy, S. J. Axford, A. P. James. 1959. Automatic linkage of vital records. Science 130(3389) 954-959.
35. O'Keefe, C. M., M. Yung, L. Gu, R. Baxter. 2004. Privacy-preserving data linkage protocols. Proc. 2004 ACM Workshop Privacy Electronic Soc., ACM Press, New York, 94-102.
36. Pagliuca, D., G. Seri. 1999. Some results of individual ranking method on the system of enterprise accounts annual survey, Esprit SDC Project, Deliverable MI-3/D2.
37. Samarati, P. 2001. Protecting respondents' identities in microdata release. IEEE Trans. Knowledge Data Engrg. 13(6) 1010-1027.
38. Seifert, J. W. 2006. Data mining and homeland security: An overview. CRS Report for Congress, January 27. Retrieved July 1, http://www.fas.org/sgp/crs/intel/RL31798.pdf.
39. Sharma, A., K. K. Paliwal. 2007. Fast principal component analysis using fixed-point algorithm. Pattern Recognition Lett. 28(10) 1151-1155.
40. Sweeney, L. 2002. k-Anonymity: A model for protecting privacy. Internat. J. Uncertainty Fuzziness Knowledge-Based Systems 10(5) 557-570.
41. Sweeney, L. 2005. Privacy-enhanced linking. SIGKDD Explorations 7(2) 72-75.
42. Teltzrow, M., A. Kobsa. 2004. Impacts of user privacy preferences on personalized systems: A comparative study. Designing Personalized User Experiences in eCommerce. Kluwer Academic Publishers, Dordrecht, The Netherlands, 315-332.
43. Torgo, L. 1996. Housing data. Retrieved January 1, http://www.cs.waikato.ac.nz/ml/weka/.
44. Traub, J. F., Y. Yemini, H. Wozniakowski. 1984. The statistical security of a statistical database. ACM Trans. Database Systems 9(4) 672-679.
45. U.S. General Accounting Office. 2001. Record linkage and privacy: Issues in creating new federal research and statistical information. Report GAO-01-126SP, GAO, Washington, DC. Retrieved July 1, http://www.gao.gov/new.items/d01126sp.pdf.
46. Winkler, W. E. 2007. Examples of easy-to-implement, widely used methods of masking for which analytic properties are not justified. Census Bureau Research Report Series (Statistics #2007-21). Retrieved March 1, http://www.census.gov/srd/papers/pdf/rrs2007-21.pdf.
47. Witten, I. H., E. Frank. 2005. Data Mining: Practical Machine Learning Tools and Techniques. Morgan Kaufmann, San Francisco.