Introduction to privacy-preserving data publishing: Concepts and techniques

Introduction to Privacy-Preserving Data Publishing: Concepts and Techniques

Volumn , Issue , 2010, Pages 1-341

  Fung, Benjamin C M ^a,b   Wang, Ke ^c   Fu, Ada Wai Chee ^e   Yu, Philip S ^d  

^a Concordia University ^*  (Canada)

^b National Cyber Forensics and Training Alliance Canada (NCFTA Canada)   (Canada)

^c SIMON FRASER UNIVERSITY   (Canada)

^d 1120 Science and Engineering Offices   (United States)

^e NONE

Author keywords

[No Author keywords available]

Indexed keywords

DATA INTEGRATION; DATA MINING; DECISION MAKING; KNOWLEDGE BASED SYSTEMS; SCALABILITY;

DATA MINING TASKS; HIGH QUALITY DATA; INFORMATION SHARING; INFORMATION UTILITY; INTEGRATION METHOD; KNOWLEDGE-BASED DECISION MAKING; PRIVACY PRESERVING DATA PUBLISHING; SENSITIVE INFORMATIONS;

DATA PRIVACY;

EID: 85054263771     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1201/9781420091502     Document Type: Book

References (272)

1. O. Abul, F. Bonchi, and M. Nanni. Never walk alone: Uncertainty for anonymity in moving objects databases. In Proc. of the 24th IEEE International Conference on Data Engineering (ICDE), pages 376–385, April 2008.
2. D. Achlioptas. Database-friendly random projections. In Proc.ofthe 20th ACM Symposium on Principles of Database Systems (PODS), pages 274–281, May 2001.
3. N. R. Adam and J. C. Wortman. Security control methods for statistical databases. ACM Computer Surveys, 21(4):515–556, December 1989.
4. E. Adar. User 4xxxxx9: Anonymizing query logs. In Proc. of the 16th International Conference on World Wide Web (WWW), 2007.
5. E. Adar, D. S. Weld, B. N. Bershad, and S. D. Gribble. Why we search: Visualizing and predicting user behavior. In Proc. of the 16th International Conference on World Wide Web (WWW), pages 161–170, 2007.
6. C. C. Aggarwal. On k-anonymity and the curse of dimensionality. In Proc. of the 31st Very Large Data Bases (VLDB), pages 901–909, Trondheim, Norway, 2005.
7. C. C. Aggarwal, J. Pei, and B. Zhang. On privacy preservation against adversarial data mining. In Proc. of the 12th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), Philadelphia, PA, August 2006.
8. C. C. Aggarwal and P. S. Yu. A condensation approach to privacy preserving data mining. In Proc. of the International Conference on Extending Database Technology (EDBT), pages 183–199, 2004.
9. C. C. Aggarwal and P. S. Yu. A framework for condensation-based anonymization of string data. Data Mining and Knowledge Discovery (DMKD), 13(3):251–275, February 2008.
10. C. C. Aggarwal and P. S. Yu. On static and dynamic methods for condensation-based privacy-preserving data mining. ACM Transactions on Database Systems (TODS), 33(1), March 2008.
11. C. C. Aggarwal and P. S. Yu. Privacy-Preserving Data Mining: Models and Algorithms. Springer, March 2008.
12. G. Aggarwal, T. Feder, K. Kenthapadi, R. Motwani, R. Panigrahy, D. Thomas, and A. Zhu. Anonymizing tables. In Proc. of the 10th International Conference on Database Theory (ICDT), pages 246–258, Edinburgh, UK, January 2005.
13. G. Aggarwal, T. Feder, K. Kenthapadi, R. Motwani, R. Panigrahy, D. Thomas, and A. Zhu. Achieving anonymity via clustering. In Proc. of the 25th ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS), Chicago, IL, June 2006.
14. G. Aggarwal, N. Mishra, and B. Pinkas. Secure computation of the kth-ranked element. In Proc. of the Eurocyrpt, 2004.
15. E. Agichtein, L. Gravano, J. Pavel, V. Sokolova, and A. Voskoboynik. Snowball: A prototype system for extracting relations from large text collections. ACM SIGMOD Record, 30(2):612, 2001.
16. D. Agrawal and C. C. Aggarwal. On the design and quantification of privacy preserving data mining algorithms. In Proc. of the 20th ACM Symposium on Principles of Satabase Systems (PODS), pages 247–255, Santa Barbara, CA, May 2001.
17. R. Agrawal, A. Evfimievski, and R. Srikant. Information sharing across private databases. In Proc. of ACM International Conference on Management of Data (SIGMOD), San Diego, CA, 2003.
18. R. Agrawal, T. Imielinski, and A. N. Swami. Mining association rules between sets of items in large databases. In Proc.ofACMInternational Conference on Management of Data (SIGMOD), 1993.
19. R. Agrawal and R. Srikant. Privacy preserving data mining. In Proc. of ACM International Conference on Management of Data (SIGMOD), pages 439–450, Dallas, Texas, May 2000.
20. R. Agrawal, R. Srikant, and D. Thomas. Privacy preserving olap. In Proc. of ACM International Conference on Management of Data (SIG-MOD), pages 251–262, 2005.
21. S. Agrawal and J. R. Haritsa. A framework for high-accuracy privacy-preserving mining. In Proc. of the 21st IEEE International Conference on Data Engineering (ICDE), pages 193–204, Tokyo, Japan, April 2005.
22. M. Atzori, F. Bonchi, F. Giannotti, and D. Pedreschi. Anonymity preserving pattern discovery. International Journal on Very Large Data Bases (VLDBJ), 17(4):703–727, July 2008.
23. M. Atzori, F. Bonchi, F. Giannotti, D. Pedreschi, and O. Abul. Privacy-aware knowledge discovery from location data. In Proc.oftheInter-national Workshop on Privacy-Aware Location-based Mobile Services (PALMS), pages 283–287, May 2007.
24. R. Axelrod. The Evolution of Cooperation. Basic Books, New York, 1984.
25. L. Backstrom, C. Dwork, and J. Kleinberg. Wherefore art thou r3579x? Anonymized social networks, hidden patterns and structural steganog-raphy. In Proc. of the International World Wide Web Conference (WWW), Banff, Alberta, May 2007.
26. B. Barak, K. Chaudhuri, C. Dwork, S. Kale, F. McSherry, and K. Talwar. Privacy, accuracy, and consistency too: A holistic solution to contingency table release. In Proc. of the 26th ACM Symposium on Principles of Database Systems (PODS), pages 273–282, Beijing, China, June 2007.
27. M. Barbaro and T. Zeller. A face is exposed for aol searcher no. 4417749. New York Times, August 9, 2006.
28. M. Barbaro, T. Zeller, and S. Hansell. A face is exposed for aol searcher no. 4417749. New York Times, August 2006.
29. R. J. Bayardo and R. Agrawal. Data privacy through optimal k-anonymization. In Proc. of the 21st IEEE International Conference on Data Engineering (ICDE), pages 217–228, Tokyo, Japan, 2005.
30. Z. Berenyi and H. Charaf. Retrieving frequent walks from tracking data in RFID-equipped warehouses. In Proc.ofConferenceonHuman System Interactions, pages 663–667, May 2008.
31. A. R. Beresford and F. Stajano. Location privacy in pervasive computing. IEEE Pervasive Computing, 1:46–55, 2003.
32. A. Blum, C. Dwork, F. McSherry, and K. Nissim. Practical privacy: The sulq framework. In Proc. of the 24th ACM Symposium on Principles of Database Systems (PODS), pages 128–138, Baltimore, MD, June 2005.
33. A. Blum, K. Ligett, and A. Roth. A learning theory approach to non-interactive database privacy. In Proc. of the 40th annual ACM Symposium on Theory of Computing (STOC), pages 609–618, Victoria, Canada, 2008.
34. B. Bollobas. Random Graphs. Cambridge, 2001.
35. F. Bonchi, F. Giannotti, and D. Pedreschi. Blocking anonymity threats raised by frequent itemset mining. In Proc. of the 5th IEEE International Conference on Data Mining (ICDM), 2005.
36. R. Brand. Microdata protection through noise addition. In Inference Control in Statistical Databases, From Theory to Practice, pages 97– 116, London, UK, 2002.
37. S. Brin, R. Motwani, and C. Silverstein. Beyond market basket: Generalizing association rules to correlations. In Proc.ofACMInternational Conference on Management of Data (SIGMOD), 1997.
38. Y. Bu, A.W.C. Fu, R.C.W. Wong, L. Chen, and J. Li. Privacypre-serving serial data publishing by role composition. Proc.oftheVLDB Endowment, 1(1):845–856, August 2008.
39. D. Burdick, M. Calimlim, J. Flannick, J. Gehrke, and T. Yiu. MAFIA: A maximal frequent itemset algorithm. IEEE Transactions on Knowledge and Data Engineering (TKDE), 17(11):1490–1504, 2005.
40. L. Burnett, K. Barlow-Stewart, A. Pros, and H. Aizenberg. The gene trustee: A universal identification system that ensures privacy and confidentiality for human genetic databases. Journal of Law and Medicine, 10:506–513, 2003.
41. Business for Social Responsibility. BSR Report on Privacy, 1999. http://www.bsr.org/.
42. J.-W. Byun, Y. Sohn, E. Bertino, and N. Li. Secure anonymization for incremental datasets. In Proc. of the VLDB Workshop on Secure Data Management (SDM), 2006.
43. D. M. Carlisle, M. L. Rodrian, and C. L. Diamond. California inpatient data reporting manual, medical information reporting for california, 5th edition. Technical report, Office of Statewide Health Planning and Development, July 2007.
44. V. T. Chakaravarthy, H. Gupta, P. Roy, and M. Mohania. Efficient techniques for documents sanitization. In Proc. of the ACM 17th Conference on Information and Knowledge Management (CIKM), 2008.
45. D. Chaum. Untraceable electronic mail, return addresses, and digital pseudonyms. Communications of the ACM, 24(2):84–88, 1981.
46. S. Chawla, C. Dwork, F. McSherry, A. Smith, and H. Wee. Toward privacy in public databases. In Proc. of Theory of Cryptography Conference (TCC), pages 363–385, Cambridge, MA, February 2005.
47. S. Chawla, C. Dwork, F. McSherry, and K. Talwar. On privacy-preserving histograms. In Proc. of Uncertainty in Artificial Intelligence (UAI), Edinburgh, Scotland, July 2005.
48. B.-C. Chen, R. Ramakrishnan, and K. LeFevre. Privacy skyline: Privacy with multidimensional adversarial knowledge. In Proc. of the 33rd International Conference on Very Large Databases (VLDB), 2007.
49. C. Clifton. Using sample size to limit exposure to data mining. Journal of Computer Security, 8(4):281–307, 2000.
50. C. Clifton, M. Kantarcioglu, J. Vaidya, X. Lin, and M. Y. Zhu. Tools for privacy preserving distributed data mining. ACM SIGKDD Explorations Newsletter, 4(2):28–34, December 2002.
51. Confidentiality and Data Access Committee. Report on statistical disclosure limitation methodology. Technical Report 22, Office of Management and Budget, December 2005.
52. L. H. Cox. Suppression methodology and statistical disclosure control. Journal of the American Statistical Association, 75(370):377–385, June 1980.
53. H. Cui, J. Wen, J. Nie, and W. Ma. Probabilistic query expansion using query logs. In Proc. of the 11th International Conference on World Wide Web (WWW), 2002.
54. E. Cuthill and J. McKee. Reducing the bandwidth of sparse symmetric matrices. In 4th National ACM Conference, 1969.
55. T. Dalenius. Towards a methodology for statistical disclosure control. Statistik Tidskrift, 15:429–444, 1977.
56. T. Dalenius. Finding a needle in a haystack-or identifying anonymous census record. Journal of Official Statistics, 2(3):329–336, 1986.
57. R. N. Dave and R. Krishnapuram. Robust clustering methods: A unified view. IEEE Transactions on Fuzzy Systems, 5(2):270–293, May 1997.
58. U. Dayal and H. Y. Hwang. View definition and generalization for database integration in a multidatabase system. IEEE Transactions on Software Engineering (TSE), 10(6):628–645, 1984.
59. D. E. Denning. Commutative filters for reducing inference threats in multilevel database systems. In Proc. of the IEEE Symposium on Security and Privacy (S&P), Oakland, CA, April 1985.
60. A. Deutsch and Y. Papakonstantinou. Privacy in database publishing. In Proc. of the 10th International Conference on Database Theory (ICDT), pages 230–245, Edinburgh, UK, January 2005.
61. C. Diaz, S. Seys, J. Claessens, and B. Preneel. Towards measuring anonymity. In Proc. of the 2nd Internationl Workshop on Privacy Enchancing Technologies (PET), pages 54–68, San Francisco, CA, April 2002.
62. I. Dinur and K. Nissim. Revealing information while preserving privacy. In Proc. of the 22nd ACM Symposium on Principles of Database Systems (PODS), pages 202–210, San Diego, June 2003.
63. J. Domingo-Ferrer. Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies, chapter Disclosure Control Methods and Information Loss for Microdata, pages 91–110. 2001.
64. J. Domingo-Ferrer. Privacy-Preserving Data Mining: Models and Algorithms, chapter A Survey of Inference Control Methods for Privacy-Preserving Data Mining, pages 53–80. Springer, 2008.
65. J. Domingo-Ferrer and V. Torra. Theory and Practical Applications for Statistical Agencies, chapter A Quantitative Comparison of Disclosure Control Methods for Microdata, Confidentiality, Disclosure and Data Access, pages 113–134. North-Holland, Amsterdam, 2002.
66. J. Domingo-Ferrer and V. Torra. A critique of k-anonymity and some of its enhancements. In Proc. of the 3rd International Conference on Availability, Reliability and Security (ARES), pages 990–993, 2008.
67. G Dong and J. Li. Efficient mining of emerging patterns: discovering trends and differences. In Proc. of 5th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), 1999.
68. Z. Dou, R. Song, and J. Wen A large-scale evaluation and analysis of personalized search strategies. In Proc. of the 16th International Conference on World Wide Web (WWW), 2007.
69. W. Du, Y. S. Han, and S. Chen. Privacy-preserving multivariate statistical analysis: Linear regression and classification. In Proc. of the SIAM International Conference on Data Mining (SDM), Florida, 2004.
70. W. Du, Z. Teng, and Z. Zhu. Privacy-MaxEnt: Integrating background knowledge in privacy quantification. In Proc. of the 34th ACM International Conference on Management of Data (SIGMOD), 2008.
71. W. Du and Z. Zhan. Building decision tree classifier on private data. In Workshop on Privacy, Security, and Data Mining at the 2002 IEEE International Conference on Data Mining, Maebashi City, Japan, December 2002.
72. W. Du and Z. Zhan. Using randomized response techniques for privacy preserving data mining. In Proc. of the 9the ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 505–510, 2003.
73. G. Duncan and S. Fienberg. Obtaining information while preserving privacy: A Markov perturbation method for tabular data. In Statistical Data Protection, pages 351–362, 1998.
74. C. Dwork. Differential privacy. In Proc. of the 33rd International Colloquium on Automata, Languages and Programming (ICALP), pages 1–12, Venice, Italy, July 2006.
75. C. Dwork. Ask a better question, get a better answer: A new approach to private data analysis. In Proc. of the Interntaional Conference on Database Theory (ICDT), pages 18–27, Barcelona, Spain, January 2007.
76. C. Dwork. Differential privacy: A survey of results. In Proc. of the 5th International Conference on Theory and Applications of Models of Computation (TAMC), pages 1–19, Xian, China, April 2008.
77. C. Dwork, F. McSherry, K. Nissim, and A. Smith. Calibrating noise to sensitivity in private data analysis. In Proc. of the 3rd Theory of Cryptography Conference (TCC), pages 265–284, New York, March 2006.
78. C. Dwork and K. Nissim. Privacy-preserving data mining on vertically partitioned databases. In Proceedings of the 24th International Cryptology Conference (CRYPTO), pages 528–544, Santa Barbara, August 2004.
79. K. E. Emam. Data anonymization practices in clinical research: A descriptive study. Technical report, Access to Information and Privacy Division of Health Canada, May 2006.
80. P. Erdos and T. Gallai. Graphs with prescribed degrees of vertices. Mat. Lapok, 1960.
81. A. Evfimievski. Randomization in privacy-preserving data mining. ACM SIGKDD Explorations Newsletter, 4(2):43–48, December 2002.
82. A. Evfimievski, R. Fagin, and D. P. Woodruff. Epistemic privacy. In Proc. of the 27th ACM Symposium on Principles of Database Systems (PODS), pages 171–180, Vancouver, Canada, 2008.
83. A. Evfimievski, J. Gehrke, and R. Srikant. Limiting privacy breaches in privacy preserving data mining. In Proc. of the 22nd ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS), pages 211–222, 2002.
84. A. Evfimievski, R. Srikant, R. Agrawal, and J. Gehrke. Privacy preserving mining of association rules. In Proc. of 8th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 217–228, Edmonton, AB, Canada, July 2002.
85. R. Fagin, Amnon Lotem, and Moni Naor. Optimal aggregation algorithms for middleware. In Proc. of the 20th ACM Symposium on Principles of Database Systems (PODS), pages 102–113, Santa Barbara, CA, 2001.
86. M. Faloutsos, P. Faloutsos, and C. Faloutsos. On power-law relationships of the internet topology. In Proc. of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication (SIGCOMM), pages 251–262, 1999.
87. C. Farkas and S. Jajodia. The inference problem: A survey. ACM SIGKDD Explorations Newsletter, 4(2):6–11, 2003.
88. T. Fawcett and F. Provost. Activity monitoring: Noticing interesting changes in behavior. In Proc. of the 5th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 53–62, San Diego, CA, 1999.
89. A. W. C. Fu, R. C. W. Wong, and K. Wang. Privacy-preserving frequent pattern mining across private databases. In Proc. of the 5th IEEE International Conference on Data Mining (ICDM), pages 613–616, Houston, TX, November 2005.
90. W. A. Fuller. Masking procedures for microdata disclosure limitation. Official Statistics, 9(2):383–406, 1993.
91. B. C. M. Fung, M. Cao, B. C. Desai, and H. Xu. Privacy protection for RFID data. In Proc. of the 24th ACM SIGAPP Symposium on Applied Computing (SAC), pages 1528–1535, Honolulu, HI, March 2009.
92. B. C. M. Fung, K. Wang, R. Chen, and P. S. Yu. Privacy-preserving data publishing: A survey on recent developments. ACM Computing Surveys, 42(4), December 2010.
93. B. C. M. Fung, K. Wang, A. W. C. Fu, and J. Pei. Anonymity for continuous data publishing. In Proc. of the 11th International Conference on Extending Database Technology (EDBT), pages 264–275, Nantes, France, March 2008.
94. B. C. M. Fung, K. Wang, L. Wang, and P. C. K. Hung. Privacy-preserving data publishing for cluster analysis. Data & Knowledge Engineering (DKE), 68(6):552–575, June 2009.
95. B. C. M. Fung, K. Wang, and P. S. Yu. Top-down specialization for information and privacy preservation. In Proc. of the 21st IEEE International Conference on Data Engineering (ICDE), pages 05–216, Tokyo, Japan, April 2005.
96. B. C. M. Fung, Ke Wang, and P. S. Yu. Anonymizing classification data for privacy preservation. IEEE Transactions on Knowledge and Data Engineering (TKDE), 19(5):711–725, May 2007.
97. J. Gardner and L. Xiong. An integrated framework for de-identifying heterogeneous data. Data and Knowledge Engineering (DKE), 68(12):1441–1451, December 2009.
98. B. Gedik and L. Liu. Protecting location privacy with personalized k-anonymity: Architecture and algorithms. IEEE Transactions on Mobile Computing (TMC), 7(1):1–18, January 2008.
99. J. Gehrke. Models and methods for privacy-preserving data publishing and analysis. In Tutorial at the 12th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), Philadelphia, PA, August 2006.
100. L. Getor and C. P. Diehl. Link mining: A survey. ACM SIGKDD Explorations Newsletter, 7(2):3–12, 2005.
101. G. Ghinita, Y. Tao, and P. Kalnis. On the anonymization of sparse high-dimensional data. In Proc. of the 24th IEEE International Conference on Data Engineering (ICDE), pages 715–724, April 2008.
102. F. Giannotti, M. Nanni, D. Pedreschi, and F. Pinelli. Trajectory pattern mining. In Proc. of the 13th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), 2007.
103. N. Gibbs, W. Poole, and P. Stockmeyer. An algorithm for reducing the bandwidth and profile of a sparse matrix. SIAM Journal on Numerical Analysis (SINUM), 13:236–250, 1976.
104. J. Goguen and J. Meseguer. Unwinding and inference control. In Proc. of the IEEE Symposium on Security and Privacy (S&P), Oakland, CA, 1984.
105. H. Gonzalez, J. Han, and X. Li. Mining compressed commodity work-flows from massive RFID data sets. In Proc. of the 16th ACM Conference on Information and Knowledge Management (CIKM), 2006.
106. M. Gruteser and D. Grunwald. Anonymous usage of location-based services through spatial and temporal cloaking. In Proc. of the 1st International Conference on Mobile Systems, Applications, and Services (MobiSys), 2003.
107. L. Gu, R. Baxter, D. Vickers, and C. Rainsford. Record linkage: Current practice and future directions. Technical report, CSIRO Mathematical and Information Sciences, 2003.
108. K. Hafner. Researchers yearn to use aol logs, but they hesitate. New York Times, 2006.
109. Jiawei Han and Micheline Kamber. Data Mining: Concepts and Techniques. Morgan Kaufmann, 2 edition, November 2005.
110. M. Hay, G. Miklau, D. Jensen, D. Towsley, and P. Weis. Resisting structural re-identification in anonymized social networks. In Proc. of the Very Large Data Bases (VLDB), Auckland, New Zealand.
111. M. Hay, G. Miklau, D. Jensen, P. Weis, and S. Srivastava. Anonymizing social networks. Technical report, University of Massachusetts Amherst, 2007.
112. Y. He and J. Naughton. Anonymization of set valued data via top down, local generalization. In Proc. of the Very Large Databases (VLDB), 2009.
113. M. Hegland, I. Mcintosh, and B. A. Turlach. A parallel solver for generalized additive models. Computational Statistics & Data Analysis, 31(4):377–396, 1999.
114. U. Hengartner. Hiding location information from location-based services. In Proc. of the International Workshop on Privacy-Aware Location-based Mobile Services (PALMS), pages 268–272, Mannheim, Germany, May 2007.
115. T. Hinke. Inference aggregation detection in database management systems. In Proc. of the IEEE Symposium on Security and Privacy (S&P), pages 96–107, Oakland, CA, April 1988.
116. T. Hinke, H. Degulach, and A. Chandrasekhar. A fast algorithm for detecting second paths in database inference analysis. Journal of Computer Security, 1995.
117. R. D. Hof. Mix, match, and mutate. Business Week, July 2005.
118. Z. Huang, W. Du, and B. Chen. Deriving private information from randomized data. In Proc. of ACM International Conference on Management of Data (SIGMOD), pages 37–48, Baltimore, ML, 2005.
119. Z. Huang and W. Du. OptRR: Optimizing randomized response schemes for privacy-preserving data mining. In Proc. of the 24th IEEE International Conference on Data Engineering (ICDE), pages 705–714, 2008.
120. A. Hundepool and L. Willenborg. μ-andτ-argus: Software for statistical disclosure control. In Proc. of the 3rd International Seminar on Statistical Confidentiality, Bled, 1996.
121. Ali Inan, Selim V. Kaya, Yucel Saygin, Erkay Savas, Ayca A. Hintoglu, and Albert Levi. Privacy preserving clustering on horizontally partitioned data. Data & Knowledge Engineering (DKE), 63(3):646–666, 2007.
122. T. Iwuchukwu and J. F. Naughton. K-anonymization as spatial indexing: Toward scalable and incremental anonymization. In Proc. of the 33rd International Conference on Very Large Data Bases (VLDB), 2007.
123. V. S. Iyengar. Transforming data to satisfy privacy constraints. In Proc. of the 8th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 279–288, Edmonton, AB, Canada, July 2002.
124. A. Jain, E. Y. Chang, and Y.-F. Wang. Adaptive stream resource management using Kalman filters. In Proc. of 2004 ACM International Conference on Management of Data (SIGMOD), pages 11–22, 2004.
125. S. Jajodia and C. Meadows. Inference problems in multilevel database management systems. IEEE Information Security: An Integrated Collection of Essays, pages 570–584, 1995.
126. M. Jakobsson, A. Juels, and R. L. Rivest. Making mix nets robust for electronic voting by randomized partial checking. In Proc. of the 11th USENIX Security Symposium, pages 339–353, 2002.
127. W. Jiang and C. Clifton. Privacy-preserving distributed k-anonymity. In Proc. of the 19th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, pages 166–177, Storrs, CT, August 2005.
128. W. Jiang and C. Clifton. A secure distributed framework for achieving k-anonymity. Very Large Data Bases Journal (VLDBJ), 15(4):316–333, November 2006.
129. R. Jones, R. Kumar, B. Pang, and A. Tomkins. I know what you did last summer. In Proc. of the 16th ACM Conference on Information and Knowledge Management (CIKM), 2007.
130. A. Juels. RFID security and privacy: A research survey. 2006.
131. P. Jurczyk and L. Xiong. Distributed anonymization: Achieving privacy for both data subjects and data providers. In Proc. of the 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec), 2009.
132. M. Kantarcioglu. Privacy-Preserving Data Mining: Models and Algorithms, chapter A Survey of Privacy-Preserving Methods Across Horizontally Partitioned Data, pages 313–335. Springer, 2008.
133. M. Kantarcioglu and C. Clifton. Privacy preserving data mining of association rules on horizontally partitioned data. IEEE Transactions on Knowledge and Data Engineering (TKDE), 16(9):1026–1037, 2004.
134. M. Kantarcioglu and C. Clifton. Privately computing a distributed k-nn classifier. In Proc. of the 8th European Conference on Principles and Practice of Knowledge Discovery in Databases (PKDD), volumeLNCS 3202, pages 279–290, Pisa, Italy, September 2004.
135. M. Kantarcioglu, J. Jin, and C. Clifton. When do data mining results violate privacy? In Proc. of the 2004 ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 599–604, Seattle, WA, 2004.
136. H. Kargupta, S. Datta, Q. Wang, and K. Sivakumar. On the privacy preserving properties of random data perturbation techniques. In Proc. of the 3rd IEEE International Conference on Data Mining (ICDM), pages 99–106, Melbourne, FL, 2003.
137. K. Kenthapadi, Nina Mishra, and Kobbi Nissim. Simulatable auditing. In Proc. of the 24th ACM Symposium on Principles of Database Systems (PODS), pages 118–127, Baltimore, MD, June 2005.
138. D. Kifer. Attacks on privacy and deFinetti’s theorem. In Proc. of the 35th ACM International Conference on Management of Data (SIG-MOD), pages 127–138, Providence, RI, 2009.
139. D. Kifer and J. Gehrke. Injecting utility into anonymized datasets. In Proc. of ACM International Conference on Management of Data (SIGMOD), Chicago, IL, June 2006.
140. J. Kim and W. Winkler. Masking microdata files. In Proc.oftheASA Section on Survey Research Methods, pages 114–119, 1995.
141. D. Kokkinakis and A. Thurin. Anonymisation of Swedish clinical data. In Proc. of the 11th Conference on Artificial Intelligence in Medicine (AIME), pages 237–241, 2007.
142. A. Korolova. Releasing search queries and clicks privately. In Proc. of the 18th International Conference on World Wide Web (WWW), 2009.
143. A. Korolova, R. Motwani, U.N. Shubha, and Y. Xu. Link privacy in social networks. In Proc. of IEEE 24th International Conference on Data Engineering (ICDE), April 2008.
144. B. Krishnamurthy. Privacy vs. security in the aftermath of the September 11 terrorist attacks, November 2001. http://www.scu.edu/ethics/publications/briefings/privacy.html.
145. J. B. Kruskal and M. Wish. Multidimensional Scaling. Sage Publications, Beverly Hills, CA, USA, 1978.
146. R. Kumar, J. Novak, B. Pang, and A. Tomkins. On anonymizing query logs via token-based hashing. In Proc. of the 16th International Conference on World Wide Web (WWW), pages 628–638, May 2007.
147. R. Kumar, K. Punera, and A. Tomkins. Hierarchical topic segmentation of websites. In Proc. of the 12th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 257–266, 2006.
148. K. LeFevre, D. J. DeWitt, and R. Ramakrishnan. Incognito: Efficient full-domain k-anonymity. In Proc. of ACM International Conference on Management of Data (SIGMOD), pages 49–60, Baltimore, ML, 2005.
149. K. LeFevre, D. J. DeWitt, and R. Ramakrishnan. Mondrian multidimensional k-anonymity. In Proc. of the 22nd IEEE International Conference on Data Engineering (ICDE), Atlanta, GA, 2006.
150. K. LeFevre, D. J. DeWitt, and R. Ramakrishnan. Workload-aware anonymization. In Proc. of the 12th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), Philadelphia, PA, August 2006.
151. K. LeFevre, D. J. DeWitt, and R. Ramakrishnan. Workload-aware anonymization techniques for large-scale data sets. ACM Transactions on Database Systems (TODS), 33(3), 2008.
152. J. Li, Y. Tao, and X. Xiao. Preservation of proximity privacy in publishing numerical sensitive data. In Proc. of the ACM International Conference on Management of Data (SIGMOD), pages 437–486, Vancouver, Canada, June 2008.
153. N. Li, T. Li, and S. Venkatasubramanian. t-closeness: Privacy beyond k-anonymity and ℓ-diversity. In Proc. of the 21st IEEE International Conference on Data Engineering (ICDE), Istanbul, Turkey, April 2007.
154. T. Li and N. Li. Modeling and integrating background knowledge. In Proc. of the 23rd IEEE International Conference on Data Engineering (ICDE), 2009.
155. G. Liang and S. S. Chawathe. Privacy-preserving inter-database operations. In Proc. of the 2nd Symposium on Intelligence and Security Informatics (ISI), Tucson, AZ, June 2004.
156. B. Liu, W. Hsu, and Y. Ma. Integrating classification and association rule mining. In Proc. of 4th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), 1998.
157. +-diversity. In Proc. of the 26th IEEE International Conference on Data Engineering (ICDE), 2010.
158. K. Liu, H. Kargupta, and J. Ryan. Random projection-based multiplicative perturbation for privacy preserving distributed data mining. IEEE Transactions on Knowledge and Data Engineering (TKDE), 18(1):92– 106, January 2006.
159. K. Liu and E. Terzi. Towards identity anonymization on graphs. In Proc. of ACM International Conference on Management of Data (SIGMOD), Vancouver, Canada, 2008.
160. A. Machanavajjhala, J. Gehrke, D. Kifer, and M. Venkitasubramaniam. ℓ-diversity: Privacy beyond k-anonymity. In Proc. of the 22nd IEEE International Conference on Data Engineering (ICDE), Atlanta, GA, 2006.
161. A. Machanavajjhala, D. Kifer, J. M. Abowd, J. Gehrke, and L. Vilhuber. Privacy: Theory meets practice on the map. In Proc. of the 24th IEEE International Conference on Data Engineering (ICDE), pages 277–286, 2008.
162. A. Machanavajjhala, D. Kifer, J. Gehrke, and M. Venkitasubramaniam. ℓ-diversity: Privacy beyond k-anonymity. ACM Transactions on Knowledge Discovery from Data (TKDD), 1(1), March 2007.
163. B. Malin and E. Airoldi. The effects of location access behavior on re-identification risk in a distributed environment. In Proc.of6thWorkshop on Privacy Enhancing Technologies (PET), pages 413–429, 2006.
164. B. Malin and L. Sweeney. How to protect genomic data privacy in a distributed network. In Journal of Biomed Info, 37(3): 179-192, 2004.
165. D. Martin, D. Kifer, A. Machanavajjhala, J. Gehrke, and J. Halpern. Worst-case background knowledge in privacy-preserving data publishing. In Proc. of the 23rd IEEE International Conference on Data Engineering (ICDE), April 2007.
166. N. S. Matloff. Inference control via query restriction vs. data modification: A perspective. In Database Security: Status and Prospects, pages 159–166, Annapolis, ML, 1988.
167. A. McCallum, A. Corrada-Emmanuel, and X. Wang. Topic and role discovery in social networks. In Proc. of International Joint Conference on Artificial Intelligence (IJCAI), 2005.
168. A. Meyerson and R. Williams. On the complexity of optimal k-anonymity. In Proc. of the 23rd ACM SIGMOD-SIGACT-SIGART PODS, pages 223–228, Paris, France, 2004.
169. G. Miklau and D. Suciu. A formal analysis of information disclosure in data exchange. In Proc. of ACM International Conference on Management of Data (SIGMOD), pages 575–586, Paris, France, 2004.
170. N. Mohammed, B. C. M. Fung, and M. Debbabi. Walking in the crowd: Anonymizing trajectory data for pattern analysis. In Proc. of the 18th ACM Conference on Information and Knowledge Management (CIKM), pages 1441–1444, Hong Kong, November 2009.
171. N. Mohammed, B. C. M. Fung, P. C. K. Hung, and C. K. Lee. Anonymizing healthcare data: A case study on the blood transfusion service. In Proc. of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 1285–1294, Paris, France, June 2009.
172. Privacy-preserving data mashup. In Proc. of the 12th International Conference on Extending Database Technology (EDBT), pages 228–239, Saint-Petersburg, Russia, March 2009.
173. R. A. Moore, Jr. Controlled data-swapping techniques for masking public use microdata sets. Statistical Research Division Report Series RR 96-04, U.S. Bureau of the Census, Washington, DC., 1996.
174. R. Motwani and Y. Xu. Efficient algorithms for masking and finding quasi-identifiers. In Proc. of SIAM International Workshop on Practical Privacy-Preserving Data Mining (P3DM), Atlanta, GA, April 2008.
175. A. Narayanan and V. Shmatikov. De-anonymizing social networks. In Proc. of the IEEE Symposium on Security and Privacy (S&P), 2009.
176. M. Ercan Nergiz, M. Atzori, and C. W. Clifton. Hiding the presence of individuals from shared databases. In Proc. of ACM International Conference on Management of Data (SIGMOD), pages 665–676, Vancouver, Canada, 2007.
177. M. Ercan Nergiz and C. Clifton. Thoughts on k-anonymization. Data & Knowledge Engineering, 63(3):622–645, Decemeber 2007.
178. M. Ercan Nergiz, C. Clifton, and A. Erhan Nergiz. Multirelational k-anonymity. In Proc. of the 23rd International Conference on Data Engineering (ICDE), pages 1417–1421, Istanbul, Turkey, 2007.
179. D. J. Newman, S. Hettich, C. L. Blake, and C. J. Merz. UCI repository of machine learning databases, 1998.
180. N. Nisan. Algorithms for selfish agents. In Proc. of the 16th Symposium on Theoretical Aspects of Computer Science, Trier, Germany, March 1999.
181. A. Ohrn and L. Ohno-Machado. Using Boolean reasoning to anonymize databases. Artificial Intelligence in Medicine, 15:235–254, 1999.
182. S. R. Oliveira and O. R. Zaiane. A privacy-preserving clustering approach toward secure and effective data analysis for business collaboration. Journal on Computers and Security, 26(1):81–93, 2007.
183. M. J. Osborne and A. Rubinstein. A Course in Game Theory. Cambridge, MA: The MIT Press, 1994.
184. G. Ozsoyoglu and T. Su. On inference control in semantic data models for statistical databases. Journal of Computer and System Sciences, 40(3):405–443, 1990.
185. S. Papadimitriou, F. Li, G. Kollios, and P. S. Yu. Time series compressibility and privacy. In Proc. of the 33rd International Conference on Very Large Data Bases (VLDB), pages 459–470, Vienna, Austria, September 2007.
186. J. Pei, J. Xu, Z. Wang, W. Wang, and K. Wang. Maintaining k-anonymity against incremental updates. In Proc. of the 19th Inter-national Conference on Scientific and Statistical Database Management (SSDBM), Banff, Canada, 2007.
187. B. Pinkas. Cryptographic techniques for privacy-preserving data mining. ACM SIGKDD Explorations Newsletter, 4(2):12–19, January 2002.
188. B. Poblete, M. Spiliopoulou, and R. Baeza-Yates. Website privacy preservation for query log publishing. Privacy, Security, and Trust in KDD. Springer Berlin / Heidelberg, 2007.
189. S. C. Pohlig and M. E. Hellman. An improved algorithm for computing logarithms over gf(p) and its cryptographic significance. IEEE Transactions on Information Theory (TIT), IT-24:106–110, 1978.
190. President Information Technology Advisory Committee. Revolutionizing health care through information technology. Technical report, Executive Office of the President of the United States, June 2004.
191. J. R. Quinlan. C4.5: Programs for Machine Learning. Morgan Kaufmann, 1993.
192. V. Rastogi, M. Hay, G. Miklau, and D. Suciu. Relationship privacy: Output perturbation for queries with joins. In Proc. of the 28th ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS), Providence, Rhode Island, USA, July 2009.
193. V. Rastogi, D. Suciu, and S. Hong. The boundary between privacy and utility in data publishing. In Proc. of the 33rd International Conference on Very Large Data Bases (VLDB), pages 531–542, Vienna, Austria, September 2007.
194. K. Reid and J. A. Scott. Reducing the total bandwidth of a sparse unsymmetric matrix. In SIAM Journal on Matrix Analysis and Applications, volume 28, pages 805–821, 2006.
195. S. P. Reiss. Practical data-swapping: The first steps. ACM Transactions on Database Systems (TODS), 9(1):20–37, 1984.
196. Steven P. Reiss, Mark J. Post, and Tore Dalenius. Non-reversible privacy transformations. In Proc. of the 1st ACM Symposium on Principles of Database Systems (PODS), pages 139–146, 1982.
197. M. K. Reiter and A. D. Rubin. Crowds: Anonymity for web transactions. ACM Transactions on Information and System Security (TIS-SEC), 1(1):66–92, November 1998.
198. S. Rizvi and J. R. Harista. Maintaining data privacy in association rule mining. In Proc. of the 28th International Conference on Very Large Data Bases (VLDB), pages 682–693, 2002.
199. B. E. Rosen, J. M. Goodwin, and J. J. Vidal. Process control with adaptive range coding. Biological Cybernetics, 67:419–428, 1992.
200. D. B. Rubin. Discussion statistical disclosure limitation. Journal of Official Statistics, 9(2).
201. P. Samarati. Protecting respondents’ identities in microdata release. IEEE Transactions on Knowledge and Data Engineering (TKDE), 13(6):1010–1027, 2001.
202. P. Samarati and L. Sweeney. Generalizing data to provide anonymity when disclosing information. In Proc. of the 17th ACM SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems (PODS), page 188, Seattle, WA, June 1998.
203. P. Samarati and L. Sweeney. Protecting privacy when disclosing information: k-anonymity and its enforcement through generalization and suppression. Technical report, SRI International, March 1998.
204. S. E. Sarma, S. A. Weis, and D. W. Engels. RFID systems and security and privacy implications. In Proc. of the 4th International Workshop on Cryptographic Hardware and Embedded Systems (CHES), pages 454– 469, 2003.
205. Y. Saygin, D. Hakkani-Tur, and G. Tur. Web and Information Security, chapter Sanitization and Anonymization of Document Repositories, pages 133–148. IRM Press, 2006.
206. Y. Saygin, V. S. Verykios, and C. Clifton. Using unknowns to prevent discovery of association rules. In Conference on Research Issues in Data Engineering, 2002.
207. B. Schneier. Applied Cryptography. John Wiley & Sons, 2 edition, 1996.
208. J. W. Seifert. Data mining and homeland security: An overview. CRS Report for Congress, (RL31798), January 2006. http://www.fas.org/sgp/crs/intel/RL31798.pdf.
209. A. Serjantov and G. Danezis. Towards an information theoretic metric for anonymity. In Proc. of the 2nd Internationl Workshop on Privacy Enchancing Technologies (PET), pages 41–53, San Francisco, CA, April 2002.
210. C. E. Shannon. A mathematical theory of communication. The Bell System Technical Journal, 27:379 and 623, 1948.
211. W. Shen, X. Li, and A. Doan. Constraint-based entity matching. In Proc. of the 20th National Conference on Artificial Intelligence (AAAI), 2005.
212. A. Shoshani. Statistical databases: Characteristics, problems and some solutions. In Proc. of the 8th Very Large Data Bases (VLDB), pages 208–213, September 1982.
213. A. Skowron and C. Rauszer. Intelligent Decision Support: Handbook of Applications and Advances of the Rough Set Theory, chapter The Discernibility Matrices and Functions in Information Systems. 1992.
214. L. Sweeney. Replacing personally-identifying information in medical records, the scrub system. In Proc. of the AMIA Annual Fall Symposium, pages 333–337, 1996.
215. L. Sweeney. Datafly: A system for providing anonymity in medical data. In Proc. of the IFIP TC11 WG11.3 11th International Conference on Database Securty XI: Status and Prospects, pages 356–381, August 1998.
216. L. Sweeney. Achieving k-anonymity privacy protection using generalization and suppression. International Journal of Uncertainty, Fuzziness, and Knowledge-based Systems, 10(5):571–588, 2002.
217. L. Sweeney. k-Anonymity: A model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge-based Systems, 10(5):557–570, 2002.
218. Y. Tao, X. Xiao, J. Li, and D. Zhang. On anti-corruption privacy preserving publication. In Proc. of the 24th IEEE International Conference on Data Engineering (ICDE), pages 725–734, April 2008.
219. M. Terrovitis and N. Mamoulis. Privacy preservation in the publication of trajectories. In Proc. of the 9th International Conference on Mobile Data Management (MDM), pages 65–72, April 2008.
220. M. Terrovitis, N. Mamoulis, and P. Kalnis. Privacy-preserving anonymization of set-valued data. Proc. of the VLDB Endowment, 1(1):115–125, August 2008.
221. The House of Commons in Canada. The personal information protection and electronic documents act, April 2000. http://www.privcom.gc.ca/.
222. The RFID Knowledgebase. Oyster transport for London TfL card UK, January 2007. http://www.idtechex.com/knowledgebase/en/cas-estudy.asp?casestudyid=227.
223. B. M. Thuraisingham. Security checking in relational database management systems augmented with inference engines. Computers and Security, 6:479–492, 1987.
224. J. Travers and S. Milgram. An experimental study of the small world problem. Sociometry, 32(4):425–443, 1969.
225. T. Trojer, B. C. M. Fung, and P. C. K. Hung. Service-oriented architecture for privacy-preserving data mashup. In Proc. of the 7th IEEE International Conference on Web Services (ICWS), pages 767–774, Los Angeles, CA, July 2009.
226. T. M. Truta and V. Bindu. Privacy protection: p-sensitive k-anonymity property. In Proc. of the Workshop on Privacy Data Management (PDM), page 94, April 2006.
227. J. Vaidya. Privacy-Preserving Data Mining: Models and Algorithms, chapter A Survey of Privacy-Preserving Methods Across Vertically Partitioned Data, pages 337–358. Springer, 2008.
228. J. Vaidya and C. Clifton. Privacy preserving association rule mining in vertically partitioned data. In Proc. of the 8th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 639–644, Edmonton, AB, Canada, 2002.
229. J. Vaidya and C. Clifton. Privacy-preserving k-means clustering over vertically partitioned data. In Proc. of the 9th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 206–215, Washington, DC, 2003.
230. J. Vaidya, C. W. Clifton, and M. Zhu. Privacy Preserving Data Mining. Springer, 2006.
231. C. J. van Rijsbergen. Information Retrieval, 2nd edition. London, But-terworths, 1979.
232. V. S. Verykios, E. Bertino, I. N. Fovino, L. P. Provenza, Y. Saygin, and Y. Theodoridis. State-of-the-art in privacy preserving data mining. ACM SIGMOD Record, 3(1):50–57, March 2004.
233. V. S. Verykios, A. K. Elmagarmid, A. Bertino, Y. Saygin, and E. Dasseni. Association rule hiding. IEEE Transactions on Knowledge and Data Engineering (TKDE), 16(4):434–447, 2004.
234. S. A. Vinterbo. Privacy: A machine learning view. IEEE Transactions on Knowledge and Data Engineering (TKDE), 16(8):939–948, August 2004.
235. D.-W. Wang, C.-J. Liau, and T.-S. Hsu. Privacy protection in social network data disclosure based on granular computing. In Proc. of IEEE International Conference on Fuzzy Systems, Vancouver, BC, July 2006.
236. K. Wang and B. C. M. Fung. Anonymizing sequential releases. In Proc. of the 12th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 414–423, Philadelphia, PA, August 2006.
237. K. Wang, B. C. M. Fung, and P. S. Yu. Handicapping attacker’s confidence: An alternative to k-anonymization. Knowledge and Information Systems (KAIS), 11(3):345–368, April 2007.
238. K. Wang, Y. Xu, A. W. C. Fu, and R. C. W. Wong. ff-anonymity: When quasi-identifiers are missing. In Proc. of the 25th IEEE International Conference on Data Engineering (ICDE), March 2009.
239. K. Wang, P. S. Yu, and S. Chakraborty. Bottom-up generalization: A data mining solution to privacy protection. In Proc. of the 4th IEEE International Conference on Data Mining (ICDM), pages 249– 256, November 2004.
240. S.-W. Wang, W.-H. Chen, C.-S. Ong, L. Liu, and Y. W. Chuang. RFID applications in hospitals: a case study on a demonstration RFID project in a taiwan hospital. In Proc. of the 39th Hawaii International Conference on System Sciences, 2006.
241. T. Wang and X. Wu. Approximate inverse frequent itemset mining: Privacy, complexity, and approximation. In Proc. of the 5th IEEE International Conference on Data Mining (ICDM), 2005.
242. S. L. Warner. Randomized response: A survey technique for eliminating evasive answer bias. Journal of the American Statistical Association, 60(309):63–69, 1965.
243. D. Whitley. The genitor algorithm and selective pressure: Why rank-based allocation of reproductive trials is best. In Proc. of the 3rd International Conference on Genetic Algorithms, pages 116–121, 1989.
244. G. Wiederhold. Intelligent integration of information. In Proc. of ACM International Conference on Management of Data (SIGMOD), pages 434–437, 1993.
245. R. C. W. Wong, A. W. C. Fu, K. Wang, and J. Pei. Minimality attack in privacy preserving data publishing. In Proc. of the 33rd International Conference on Very Large Data Bases (VLDB), pages 543–554, Vienna, Austria, 2007.
246. R. C. W. Wong, J. Li., A. W. C. Fu, and K. Wang. (α,k)-anonymity: An enhanced k-anonymity model for privacy preserving data publishing. In Proc. of the 12th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 754–759, Philadelphia, PA, 2006.
247. R. C. W. Wong, J. Li., A. W. C. Fu, and K. Wang. (α,k)-anonymous data publishing. Journal of Intelligent Information Systems, in press.
248. R. N. Wright, Z. Yang, and S. Zhong. Distributed data mining protocols for privacy: A review of some recent results. In Proc.oftheSecure Mobile Ad-hoc Networks and Sensors Workshop (MADNES), 2005.
249. X. Xiao and Y. Tao. Anatomy: Simple and effective privacy preservation. In Proc. of the 32nd Very Large Data Bases (VLDB), Seoul, Korea, September 2006.
250. X. Xiao and Y. Tao. Personalized privacy preservation. In Proc. of ACM International Conference on Management of Data (SIGMOD), Chicago, IL, 2006.
251. X. Xiao and Y. Tao. m-invariance: Towards privacy preserving re-publication of dynamic datasets. In Proc.ofACMInternationalConference on Management of Data (SIGMOD), Beijing, China, June 2007.
252. X. Xiao, Y. Tao, and M. Chen. Optimal random perturbation at multiple privacy levels. In Proc. of the 35th Very Large Data Bases (VLDB), pages 814–825, 2009.
253. L. Xiong and E. Agichtein. Towards privacy-preserving query log publishing. In Query Logs Workshop at the 16th International Conference on World Wide Web, 2007.
254. J. Xu, W. Wang, J. Pei, X. Wang, B. Shi, and A. W. C. Fu. Utility-based anonymization using local recoding. In Proc. of the 12th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), Philadelphia, PA, August 2006.
255. Y. Xu, B. C. M. Fung, K. Wang, A. W. C. Fu, and J. Pei. Publishing sensitive transactions for itemset utility. In Proc. of the 8th IEEE International Conference on Data Mining (ICDM), Pisa, Italy, December 2008.
256. Y. Xu, K. Wang, A. W. C. Fu, and P. S. Yu. Anonymizing transaction databases for publication. In Proc. of the 14th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), August 2008.
257. X. Yan and J. Han. gSpan: Graph-based substructure pattern mining. In Proc. of the 2nd IEEE International Conference on Data Mining (ICDM), 2002.
258. Z. Yang, S. Zhong, and R. N. Wright. Anonymity-preserving data collection. In Proc. of the 11th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pages 334–343, 2005.
259. Z. Yang, S. Zhong, and R. N. Wright. Privacy-preserving classification of customer data without loss of accuracy. In Proc.ofthe5thSIAMInternational Conference on Data Mining (SDM), pages 92–102, Newport Beach, CA, 2005.
260. A. C. Yao. Protocols for secure computations. In Proc. of the 23rd IEEE Symposium on Foundations of Computer Science, pages 160–164, 1982.
261. A. C. Yao. How to generate and exchange secrets. In Proc. of the 27th Annual IEEE Symposium on Foundations of Computer Science, pages 162–167, 1986.
262. C. Yao, X. S. Wang, and S. Jajodia. Checking for k-anonymity violation by views. In Proc. of the 31st Very Large Data Bases (VLDB), pages 910–921, Trondheim, Norway, 2005.
263. R. Yarovoy, F. Bonchi, L. V. S. Lakshmanan, and W. H. Wang. Anonymizing moving objects: How to hide a MOB in a crowd? In Proc. of the 12th International Conference on Extending Database Technology (EDBT), pages 72–83, 2009.
264. X. Ying and X. Wu. Randomizing social networks: a spectrum preserving approach. In Proc. of SIAM International Conference on Data Mining (SDM), Atlanta, GA, April 2008.
265. T.-H. You, W.-C. Peng, and W.-C. Lee. Protect moving trajectories with dummies. In Proc. of the International Workshop on Privacy-Aware Location-based Mobile Services (PALMS), pages 278–282, May 2007.
266. H. Yu, P. Gibbons, M. Kaminsky, and F. Xiao. Sybil-limit: A near-optimal social network defense against sybil attacks. In Proc. of the IEEE Symposium on Security and Privacy, 2008.
267. L. Zayatz. Disclosure avoidance practices and research at the U.S. census bureau: An update. Journal of Official Statistics, 23(2):253–265, 2007.
268. P. Zhang, Y. Tong, S. Tang, and D. Yang. Privacy-preserving naive bayes classifier. Lecture Notes in Computer Science, 3584, 2005.
269. Q. Zhang, N. Koudas, D. Srivastava, and T. Yu. Aggregate query answering on anonymized tables. In Proc. of the 23rd IEEE International Conference on Data Engineering (ICDE), April 2007.
270. E. Zheleva and L. Getoor. Preserving the privacy of sensitive relationships in graph data. In Proc. of the 1st ACM SIGKDD International Workshop on Privacy, Security and Trust in KDD, San Jose, USA, Aug 2007.
271. B. Zhou and J. Pei. Preserving privacy in social networks against neighborhood attacks. In Proc. of IEEE 24th International Conference on Data Engineering (ICDE), April 2008.
272. L. Zou, L. Chen, and M. T. Özsu. K-automorphism: A general framework for privacy preserving network publication. Proc.oftheVLDB Endowment, 2(1):946–957, 2009