Using Statistics to Protect Privacy

Privacy, Big Data, and the Public Good: Frameworks for Engagement

Volumn , Issue , 2013, Pages 276-295

  Karr, Alan F ^a,b   Reiter, Jerome P ^c,d  

^a National Institute of Statistical Sciencesa   (United States)

^b UNIVERSITY OF NORTH CAROLINA   (United States)

^c DUKE UNIVERSITY   (United States)

^d Triangle Census Research Network   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84923617218     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1017/CBO9781107590205.017     Document Type: Chapter

References (46)

1. and R. H. Creecy. 2002. Disclosure risk6. Final report to the Social Security Administration on the SIPP/SSA/IRS Public Use File Project. Technical report, U.S. Census Bureau Longitudinal Employer-Household Dynamics Program. Available at http://www.census.gov/sipp/syntRdata.html.
2. Cox, L. H. 1980. Suppression methodology and statistical disclosure control. Journal of the American Statistical Association 75:377-385.
3. Cox, L. H., A. F. Karr, and S. K. Kinney. 2011. Risk-utility paradigms for statistical disclosure limitation: How to think, but not how to act (with discussion). International Statistical Review 79(2):160-199.
4. Dalenius, T., and S. P Reiss. 1982. Data-swapping: A techniquefor disclosure control. Journal of Statistical Planning and Inference 6:73-85.
5. Dobra, A., S. E. Fienberg, A. F. Karr, and A. P Sanil. 2002. Software systems for tabular data releases. International Journal of Uncertainty, Fuzziness and Knowledge Based Systems 10(5):529-544.
6. Dobra, A., A. F. Karr, and A. P Sanil. 2003. Preserving confidentiality of highdimensional tabular data: Statistical and computational issues. Statistics and Computing 13(4):363-370.
7. Drechsler, J., and J. P Reiter. 2010. Sampling with synthesis: A new approach for releasing public use census microdata. Journal of the American Statistical Association 105:1347-1357.
8. Drechsler, J., and J. P Reiter. 2011. An empirical evaluation of easily implemented, nonparametric methods for generating synthetic datasets. Computational Statistics and Data Analysis 55:3232-3243.
9. Duncan, G. T., and D. Lambert. 1986. Disclosure-limited data dissemination. Journal of the American Statistical Association 81:10-28.
10. Duncan, G. T., and D. Lambert. 1989. The risk of disclosure for microdata. Journal of Business and Economic Statistics 7:207-217.
11. Dwork, C. 2006. Differential privacy. In Automata, Languages and Programming, ed. M. Bugliesi, B. Preneel, V. Sassone, and I. Wegener, LNCS 4052, 1-12. Berlin: Springer.
12. Federal Committee on Statistical Methodology. 1994. Report on Statistical Disclosure Limitation Methodology. Statistical Policy Working Paper 22. Washington, DC: U.S. Office of Management and Budget.
13. Fienberg, S. E., U. E. Makov, and A. P. Sanil. 1997. A Bayesian approach to data disclosure: Optimal intruder behavior for continuous data. Journal of Official Statistics 13:75-89.
14. Fuller, W A. 1993. Masking procedures for microdata disclosure limitation. Journal of Official Statistics 9:383-406.
15. Groves, R. M. 2004. Survey Errors and Survey Costs. New York: Wiley.
16. Hundepool, A., J. Domingo-Ferrer, L. Franconi, S. Giessing, E. Schulte-Nordholt, K. Spicer, and P.-P. de Wolf. 2012. Statistical Disclosure Control. New York: Wiley.
17. Karr, A. F. 2010. Secure statistical analysis of distributed databases, emphasizing what we don’t know. Journal of Privacy and Confidentiality 1(2):197-211.
18. Karr, A. F. 2012. Discussion on statistical use of administrative data: Old and new challenges. Statistica Neerlandica 66(1):80-84.
19. Karr, A. F. 2013. Discussion of five papers on Systems and Architectures for High-Quality Statistics Production. Journal of Official Statistics 29(1):157-163.
20. Karr, A. F. 2014. Why data availability is such a hard problem. Statistical Journal of the International Association for Official Statistics, to appear.
21. Karr, A. F., W J. Fulp, X. Lin, J. P. Reiter, F. Vera, and S. S. Young. 2007. Secure, privacy-preserving analysis of distributed databases. Technometrics 49(3):335-345.
22. Karr, A. F, S. K. Kinney, and J. F Gonzalez Jr. 2010. Data confidentiality - the next five years: Summary and guide to papers. Journal of Privacy and Confidentiality 1(2):125-134.
23. Karr, A. F, C. N. Kohnen, A. Oganian, J. P. Reiter, and A. P. Sanil. 2006. A framework for evaluating the utility of data altered to protect confidentiality. The American Statistician 60:224-232.
24. Karr, A. F, and X. Lin. 2010. Privacy-preserving maximum likelihood estimation for distributed data. Journal of Privacy and Confidentiality 1(2):213-222.
25. Karr, A. F, X. Lin, J. P. Reiter, and A. P. Sanil. 2005. Secure regression on distributed databases. Journal of Computational and Graphical Statistics 14(2):263-279.
26. Kennickell, A., and J. Lane. 2006. Measuring the impact of data protection techniques on data utility: Evidence from the Survey of Consumer Finances. In Privacy in Statistical Databases 2006, ed. J. Domingo-Ferrer and L. Franconi, LNCS 4302, 291-303. New York: Springer.
27. Kinney, S. K., J. P. Reiter, A. P. Reznek, J. Miranda, R. S. Jarmin, and J. M. Abowd. 2011. Towards unrestricted public use business microdata: The synthetic Longitudinal Business Database. International Statistical Review 79:363-384.
28. Lambert, D. 1993. Measures of disclosure risk and harm. Journal of Official Statistics 9:313-331.
29. Machanavajjhala, A., D. Kifer, J. Abowd, J. Gehrke, and L. Vilhuber. 2008. Privacy: Theory meets practice on the map. In Proc. IEEE 24th International Conference on Data Engineering, 277-286.
30. Manrique-Vallier, D., and J. P. Reiter. 2012. Estimating identification disclosure risk using mixed membership models. Journal of the American Statistical Association 107:1385-1394.
31. McClure, D., and J. P. Reiter. 2012a. Differential privacy and statistical disclosure risk measures: An illustration with binary synthetic data. Transactions on Data Privacy 5:535-552.
32. McClure, D., and J. P Reiter. 2012b. Towards providing automated feedback on the quality of inferences from synthetic datasets. Journal of Privacy and Confidentiality, 4(1): article 8.
33. National Research Council. 2005. Expanding Access to Research Data: Reconciling Risks and Opportunities. Panel on Data Access for Research Purposes, Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.
34. National Research Council. 2007. Putting People on the Map: Protecting Confidentiality with Linked Social-Spatial Data. Panel on Confidentiality Issues Arising from the Integration of Remotely Sensed and Self-Identifying Data, Committee on the Human Dimensions of Global Change, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.
35. Reiter, J. P 2005. Estimating identification risks in microdata. Journal of the American Statistical Association 100:1103-1113.
36. Reiter, J. P 2011. Commentary on article by Gates. Journal of Privacy and Confidentiality 3: article 8.
37. Reiter, J. P. 2012. Statistical approaches to protecting confidentiality for microdata and their effects on the quality of statistical inferences. Public Opinion Quarterly 76:163-181.
38. Reiter, J. P, A. Oganian, and A. F. Karr. 2009. Verification servers: Enabling analysts to assess the quality of inferences from public use data. Computational Statistics and Data Analysis 53:1475-1482.
39. Reiter, J. P, and T. E. Raghunathan. 2007. The multiple adaptations of multiple imputation. Journal of the American Statistical Association 102:1462-1471.
40. Shlomo, N., and C. J. Skinner. 2010. Assessing the protection provided by misclassification-based disclosure limitation methods for survey microdata. Annals of Applied Statistics 4:1291-1310.
41. Skinner, C. 2012. Statistical disclosure risk: Separatingpotentialandharm. International Statistical Review 80:349-368.
42. Skinner, C. J., and N. Shlomo. 2008. Assessing identification risk in survey microdata usinglog-linearmodels.JournaloftheAmerican Statistical Association 103:989-1001.
43. Willenborg, L., and T. de Waal. 2001. Elements of Statistical Disclosure Control. New York: Springer.
44. Winkler, W. E. 2007. Examples of easy-to-implement, widely used methods of masking for which analytic properties are not justified. U.S. Census Bureau Research Report Series, No. 2007-21. Washington, DC: U.S. Census Bureau.
45. Woo, M.J., J. P Reiter, A. Oganian, and A. F. Karr. 2009. Global measures of data utility for microdata maskedfor disclosure limitation. Journal of Privacy and Confidentiality 1:111-124.
46. Yancey, W. E., W. E. Winkler, and R. H. Creecy. 2002. Disclosure risk assessment in perturbative microdata protection. In Inference Control in Statistical Databases, ed. J. Domingo-Ferrer, 135-152. Berlin: Springer.