On syntactic anonymity and differential privacy

Transactions on Data Privacy

Volumn 6, Issue 2, 2013, Pages 161-183

  Clifton, Chris ^a   Tassa, Tamir ^b  

^a Purdue University   (United States)

^b OPEN UNIVERSITY OF ISRAEL   (Israel)

Author keywords

[No Author keywords available]

Indexed keywords

DIFFERENTIAL PRIVACIES; K-ANONYMITY; PRIVACY PRESERVING DATA MINING; PRIVATE DATA; RESEARCH CHALLENGES; SYNTACTIC APPROACH;

DATA PRIVACY; SYNTACTICS;

RESEARCH;

EID: 84881650268     PISSN: 18885063     EISSN: 20131631     Source Type: Journal    
DOI: None     Document Type: Article

References (90)

1. C. C. Aggarwal. On k-anonymity and the curse of dimensionality. In VLDB, pages 901-909, 2005.
2. G. Aggarwal, T. Feder, K. Kenthapadi, S. Khuller, R. Panigrahy, D. Thomas, and A. Zhu. Achiev-ing anonymity via clustering. In ACM-SIGMOD Symposium on Principles of Database Systems (PODS), pages 153-162, 2006.
3. R. Agrawal and R. Srikant. Privacy-preserving data mining. In ACM-SIGMOD Conference on Management of Data, pages 439-450, May 2000.
4. F. Bacchus, A. J. Grove, D. Koller, and J. Y. Halpern. From statistics to beliefs. In AAAI, pages 602-608, 1992.
5. B. Barak, K. Chaudhuri, C. Dwork, S. Kale, F. McSherry, and K. Talwar. Privacy, accuracy, and consistency too: a holistic solution to contingency table release. In PODS, pages 273-282, 2007.
6. R. Bhaskar, S. Laxman, A. Smith, and A. Thakurta. Discovering frequent patterns in sensitive data. In KDD, pages 503-512, 2010.
7. A. Blum, K. Ligett, and A. Roth. A learning theory approach to non-interactive database privacy. In STOC, pages 609-618, 2008.
8. A. Blum, K. Ligett, and A. Roth. A learning theory approach to non-interactive database privacy. In Proceedings of the 40th annual ACM symposium on Theory of computing, pages 609-618, 2008.
9. L. Burnett, K. Barlow-Stewart, A. Proos, and H. Aizenberg. The GeneTrustee: a universal identification system that ensures privacy and confidentiality for human genetic databases. Journal of Law and Medicine, 10(4):506-513, 2003.
10. J. Cao and P. Karras. Publishing microdata with a robust privacy guarantee. PVLDB, 5:1388-1399, 2012.
11. K. Chaudhuri and C. Monteleoni. Privacy-preserving logistic regression. In NIPS, pages 289-296, 2008.
12. R. Chen, N. Mohammed, B. C. M. Fung, B. C. Desai, and L. Xiong. Publishing set-valued data via differential privacy. PVLDB, 4(11):1087-1098, 2011.
13. G. Cormode. Personal privacy vs population privacy: learning to attack anonymization. In Proceedings of the 17th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pages 1253-1261, 2011.
14. G. Cormode, N. Li, T. Li, and D. Srivastava. Minimizing minimality and maximizing utility: Analyzing method-based attacks on anonymized data. PVLDB, 3:1045-1056, 2010.
15. G. Cormode, C. M. Procopiuc, E. Shen, D. Srivastava, and T. Yu. Empirical privacy and empirical utility of anonymized data. In ICDE Workshop on Privacy-Preserving Data Publication and Analysis (PRIVDB), 2013.
16. B. Ding, M. Winslett, J. Han, and Z. Li. Differentially private data cubes: optimizing noise sources and consistency. In SIGMOD Conference, pages 217-228, 2011.
17. D. Dobkin, A. K. Jones, and R. J. Lipton. Secure databases: Protection against user influence. ACM Trans. Database Syst., 4(1):97-106, Mar. 1979.
18. C. Dwork. Differential privacy. In ICALP (2), pages 1-12, 2006
19. C. Dwork. Differential privacy: A survey of results. In TAMC, pages 1-19, 2008
20. C. Dwork, K. Kenthapadi, F. McSherry, I. Mironov, and M. Naor. Our data, ourselves: Privacy via distributed noise generation. In Advances in Cryptology (EUROCRYPT 2006), page 486503, Saint Petersburg, Russia, May 2006.
21. C. Dwork, F. McSherry, K. Nissim, and A. Smith. Calibrating noise to sensitivity in private data analysis. In TCC, pages 265-284, 2006
22. C. Dwork, M. Naor, O. Reingold, G. N. Rothblum, and S. P. Vadhan. On the complexity of differentially private data release: efficient algorithms and hardness results. In Proceedings of the 41st annual ACM symposium on Theory of computing, pages 381-390, 2009.
23. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Official Journal of the European Communities, No I.(281):31-50, Oct. 24 1995
24. K. E. Emam and F. Dankar. Protecting privacy using k-anonymity. Journal of the American Medical Informatics Association, 15:627-637, 2008.
25. K. E. Emam, F. K. Dankar, R. Issa, E. Jonker, D. Amyot, E. Cogo, J.-P. Corriveau, M. Walker, S. Chowdhury, R. Vaillancourt, T. Roffey, and J. Bottomley. A globally optimal k-anonymity method for the de-identification of health information. Journal of the American Medical Informatics Association, 16:670-682, 2009.
26. Standard for privacy of individually identifiable health information. Federal Register, Special Edition:768-769, Oct. 1 2007. 45 CFR 164.514(b)(2).
27. Federal Committee on Statistical Methodology. Statistical policy working paper 22 (second version, 2005): Report on statistical disclosure limitation methodology. Technical report, Statistical and Science Policy, Office of Information and Regulatory Affairs, Office of Management and Budget, Dec. 2005. http://www.fcsm.gov/working-papers/spwp22.html.
28. D. Feldman, A. Fiat, H. Kaplan, and K. Nissim. Private coresets. In STOC, pages 361-370, 2009
29. A. Friedman and A. Schuster. Data mining with differential privacy. In KDD, pages 493-502, 2010.
30. B. C. M. Fung, K. Wang, and P. S. Yu. Anonymizing classification data for privacy preservation. IEEE Trans. on Knowl. and Data Eng., 19(5):711-725, 2007.
31. S. R. Ganta, S. P. Kasiviswanathan, and A. Smith. Composition attacks and auxiliary information in data privacy. In KDD, pages 265-273, 2008.
32. J. Gehrke, E. Lui, and R. Pass. Towards privacy for social networks: A zero-knowledge based definition of privacy. In Theory of Cryptography Conference, pages 432-449, 2011.
33. A. Gionis, A. Mazza, and T. Tassa. k-anonymization revisited. In International Conference on Data Engineering (ICDE), pages 744-753, 2008.
34. J. Goldberger and T. Tassa. Efficient anonymizations with enhanced utility. Transactions on Data Privacy, 3(2):149-175, 2010.
35. M. G ötz, A. Machanavajjhala, G. Wang, X. Xiao, and J. Gehrke. Publishing search logs-a comparative study of privacy guarantees. IEEE Trans. Knowl. Data Eng., 24:520-532, 2012.
36. M. Hardt, K. Ligett, and F. McSherry. A simple and practical algorithm for differentially private data release. CoRR, abs/1012.4763, 2010.
37. M. Hay, V. Rastogi, G. Miklau, and D. Suciu. Boosting the accuracy of differentially private histograms through consistency. PVLDB, 3:1021-1032, 2010.
38. A. Hundepool, J. Domingo-Ferrer, L. Franconi, S. Giessing, E. S. Nordholt, K. Spicer, and P.-P. de Wolf. Statistical Disclosure Control. Wiley, 2012.
39. Interagency Confidentiality and Data Access Group: An Interest Group of the Federal Committee on Statistical Methodology. Checklist on disclosure potential of proposed data releases. Technical report, Statistical Policy Office, Office of Information and Regulatory Affairs, Office of Management and Budget, July 1999. http://www.fcsm.gov/committees/cdac/.
40. V. Iyengar. Transforming data to satisfy privacy constraints. In KDD'02: Proceedings of the eighth ACM SIGKDD international conference on Knowledge discovery and data mining, pages 279-288, 2002.
41. P. Jurczyk and L. Xiong. Distributed anonymizations: Achieving privacy for both data subjects and data providers. In Data and Applications Security, pages 191-207, 2009.
42. H. Kargupta, S. Datta, Q. Wang, and K. Sivakumar. Random data perturbation techniques and privacy preserving data mining. Knowledge and Information Systems, 7(4):387-414, May 2005.
43. S. P. Kasiviswanathan, H. K. Lee, K. Nissim, S. Raskhodnikova, and A. Smith. What can we learn privately? In FOCS, pages 531-540, 2008.
44. D. Kifer. Attacks on privacy and definetti's theorem. In SIGMOD Conference, pages 127-138, 2009.
45. D. Kifer and A. Machanavajjhala. No free lunch in data privacy. In SIGMOD, pages 193-204, 2011.
46. D. Kifer and A. Machanavajjhala. A rigorous and customizable framework for privacy. In PODS, pages 77-88, Scottsdale, Arizona, May 21-23 2012.
47. A. Korolova, K. Kenthapadi, N. Mishra, and A. Ntoulas. Releasing search queries and clicks privately. In WWW, pages 171-180, 2009.
48. M. Last, T. Tassa, and A. Zhmudyak. Improving accuracy of classification models induced from anonymized datasets. To appear in Information Sciences.
49. J. Lee and C. Clifton. How much is enough? choosing for differential privacy. In The 14th Information Security Conference (ISC 2011), pages 325-340, Xi'an, China, Oct. 26-29 2011.
50. J. Lee and C. Clifton. Differential identifiability. In The 19th ACM SIGKDD Conference on Knowledge Discovery and Data Mining, pages 1041-1049, Beijing, China, Aug. 12-16 2012.
51. K. LeFevre, D. J. DeWitt, and R. Ramakrishnan. Workload-aware anonymization techniques for large-scale datasets. ACM Trans. Database Syst, 33(3):1-47, 2008.
52. C. Li, M. Hay, V. Rastogi, G. Miklau, and A. McGregor. Optimizing linear counting queries under differential privacy. In PODS, pages 123-134, 2010.
53. N. Li, T. Li, and S. Venkatasubramanian. t-closeness: Privacy beyond k-anonymity and ℓdiversity. In Proceedings of IEEE International Conference on Data Engineering (ICDE) 2007, pages 106-115, 2007.
54. N. Li, W. Qardaji, and D. Su. On sampling, anonymization, and differential privacy: Or, kanonymization meets differential privacy. In 7th ACM Symposium on Information, Computer and Communications Security (ASIACCS'2012), pages 32-33, Seoul, Korea, May 2-4 2012.
55. A. Machanavajjhala, D. Kifer, J. M. Abowd, J. Gehrke, and L. Vilhuber. Privacy: Theory meets practice on the map. In ICDE, pages 277-286, 2008.
56. A. Machanavajjhala, D. Kifer, J. Gehrke, and M. Venkitasubramaniam. ℓ-diversity: Privacy beyond k-anonymity. ACM Trans. Knowl. Discov. Data, 1(1):3, 2007.
57. B. Malin. Trail Re-Identification and Unlinkability in Distributed Databases. PhD thesis, Carnegie Mellon University, May 2006.
58. F. McSherry and I. Mironov. Differentially private recommender systems: Building privacy into the netflix prize contenders. In KDD, pages 627-636, 2009.
59. F. McSherry and K. Talwar. Mechanism design via differential privacy. In 48th Annual IEEE Sym-posium on Foundations of Computer Science (FOCS'07), pages 94-103, Providence, Rhode Island, Oct. 21-23 2007.
60. N. Mohammed, B. C. M. Fung, P. C. K. Hung, and C. kwong Lee. Anonymizing healthcare data: a case study on the blood transfusion service. In KDD, pages 1285-1294, 2009.
61. R. A. Moore, Jr. Analysis of the kim-winkler algorithm for masking microdata files-how much masking is necessary and sufficient? conjectures for the development of a controllable algorithm. Statistical Research Division Report Series RR 96-05, U.S. Bureau of the Census, Washington, DC., 1996.
62. R. A. Moore, Jr. Controlled data-swapping techniques for masking public use microdata sets. Statistical Research Division Report Series RR 96-04, U.S. Bureau of the Census, Washington, DC., 1996.
63. A. Narayanan and V. Shmatikov. Myths and fallacies of personally identifiable information. Comm. of the ACM, 53(6):24-26, 2010.
64. National Center for Biotechnology Information. dbGaP: Genotypes and Phenotypes. http://www.ncbi.nlm.nih.gov/projects/gap/cgi-bin/about.html.
65. M. E. Nergiz and C. Clifton. Thoughts on k-anonymization. Data and Knowledge Engineering, 63(3):622-645, Dec. 2007.
66. K. Nissim, S. Raskhodnikova, and A. Smith. Smooth sensitivity and sampling in private data analysis. In STOC, pages 75-84, 2007.
67. V. Rastogi and S. Nath. Differentially private aggregation of distributed time-series with transformation and encryption. In SIGMOD Conference, pages 735-746, 2010.
68. A. Roth and T. Roughgarden. Interactive privacy via the median mechanism. In STOC, pages 765-774, 2010.
69. P. Samarati. Protecting respondents' identities in microdata release. IEEE Trans. on Knowl. And Data Eng., 13(6):1010-1027, 2001.
70. P. Samarati and L. Sweeney. Generalizing data to provide anonymity when disclosing information (abstract). In PODS'98: Proceedings of the seventeenth ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems, page 188, 1998.
71. R. Sarathy and K. Muralidhar. Evaluating laplace noise addition to satisfy differential privacy for numeric data. Transactions on Data Privacy, 4(1):1-17, 2011.
72. E. Shmueli and T. Tassa. Privacy by diversity in sequential releases of databases. Submitted.
73. E. Shmueli, T. Tassa, R. Wasserstein, B. Shapira, and L. Rokach. Limiting disclosure of sensitive data in sequential releases of databases. Information Sciences, 191:98-127, 2012.
74. L. Sweeney. Uniqueness of simple demographics in the U.S. population. Laboratory for international Data Privacy (LIDAP-WP4), 2000.
75. L. Sweeney. k-anonymity: A model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 10(5):557-570, 2002.
76. C. Task and C. Clifton. A guide to differential privacy theory in social network analysis. In The 2012 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining (ASONAM 2012), Istanbul, Turkey, Aug. 26-29 2012.
77. T. Tassa and E. Gudes. Secure distributed computation of anonymized views of shared databases. Transactions on Database Systems, 37(2):11, 2012.
78. T. Tassa, A. Mazza, and A. Gionis. k-Concealment: An alternative model of k-type anonymity. Transactions on Data Privacy, 5(1):189-222, 2012.
79. T. Truta, A. Campan, and P. Meyer. Generating microdata with p-sensitive k-anonymity property. In SDM, pages 124-141, 2007.
80. K. Wang and B. Fung. Anonymizing sequential release. In Proceedings of the 12th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD'06), pages 414-423, 2006.
81. L. Wang, D. Wijesekera, and S. Jajodia. Cardinality-based inference control in data cubes. Journal of Computer Security, 12(5):655-692, 2005.
82. L. Wasserman and S. Zhou. A statistical framework for differential privacy. Journal of the American Statistical Association, 105(489):375-389, Mar. 2010.
83. L. Willenborg and T. D. Waal. Elements of Statistical Disclosure Control, volume 155 of Lecture Notes in Statistics. Springer Verlag, New York, NY, 2001.
84. R. Wong, J. Li, A. Fu, and K. Wang. (α, k)-anonymity: an enhanced k-anonymity model for privacy preserving data publishing. In In ACM SIGKDD, pages 754-759, 2006.
85. R. C.-W. Wong, A. W.-C. Fu, K. Wang, and J. Pei. Minimality attack in privacy preserving data publishing. In VLDB, pages 543-554, 2007.
86. W. K. Wong, N. Mamoulis, and D. W.-L. Cheung. Non-homogeneous generalization in privacy preserving data publishing. In SIGMOD Conference, pages 747-758, 2010.
87. X. Xiao and Y. Tao. Anatomy: Simple and effective privacy preservation. In Proceedings of 32nd International Conference on Very Large Data Bases (VLDB 2006), pages 139-150, Seoul, Korea, Sept. 12-15 2006.
88. X. Xiao, G. Wang, and J. Gehrke. Differential privacy via wavelet transforms. In ICDE, pages 225-236, 2010.
89. Y. Xiao, L. Xiong, and C. Yuan. Differentially private data release through multidimensional partitioning. In Secure Data Management, pages 150-168, 2010.
90. S. Zhong, Z. Yang, and R. Wright. Privacy-enhancing k-anonymization of customer data. In PODS, pages 139-147, 2005