Optimal Disclosure Limitation Strategy in Statistical Databases: Deterring Tracker Attacks through Additive Noise

References

• Adam , N. R. , Gangophadhyay , A. and Holowczak , R. “A Survey on Research on Database Protection,” . Proceedings of Statistical Data Protection ‘98 . March 25–27 , Eurostat, Lisbon , Portugal.
   Google Scholar
• Adam , N. R. and Wortmann , J. C. 1989 . “Security-Control Methods for Statistical Databases: A Comparative Study” . ACM Computing Surveys , 21 : 515 – 556 .
   Web of Science ®Google Scholar
• Ahituv , N. , Lapid , Y. and Neumann , S. 1988 . “Protecting Statistical Databases Against Retrieval of Private Information” . Computers & Security , 7 : 59 – 63 .
   Google Scholar
• Beck , L. L. 1980 . “A Security Mechanism for Statistical Databases” . ACM Transactions on Database Systems , 5 : 316 – 338 .
   Google Scholar
• Bethlehem , J. G. , Keller , W. J. and Pannekoek , J. 1990 . “Disclosure Control of Microdata” . Journal of the American Statistical Association , 85 : 38 – 45 .
   Web of Science ®Google Scholar
• Cassel , C. M. 1976 . “Probability Based Disclosures,” . In Personal Integrity and the Need for Data in the Social Sciences , Edited by: Dalenius , T. and Klevmarken , A. 189 – 193 . Stockholm : Swedish Council for Social Science Research .
   Google Scholar
• Castano , S. , Fugini , M. , Martella , G. and Samarati , P. 1994 . “Intrusion Detection Systems,” . In Database Security , 343 – 382 . New York : Addison-Wesley .
   Google Scholar
• Chin , F. Y. and Ozsoyoglu , G. 1981 . “Statistical Database Design” . ACM Transactions on Database Systems , 6 : 113 – 139 .
   Web of Science ®Google Scholar
• Cox , L. H. 1980 . “Suppression Methodology and Statistical Disclosure Control” . Journal of the American Statistical Association , 75 : 377 – 385 .
   Web of Science ®Google Scholar
• Cox , L. H. 1995 . “Network Models for Complementary Cell Suppression” . Journal of the American Statistical Association , 90 : 1453 – 1462 .
   Web of Science ®Google Scholar
• Dalenius , T. 1988 . Controlling Invasion of Privacy in Statistical Research Units , Stockholm : Statistics Sweden .
   Google Scholar
• Dalenius , T. and Reiss , S. P. 1982 . “Data Swapping: A Technique for Disclosure Control” . Journal of Statistical Planning and Inference , 6 : 73 – 85 .
   Web of Science ®Google Scholar
• Denning , D. E. , Denning , P. J. and Schwartz , M. D. 1978 . “The Tracker: A Threat to Statistical Database Security” . ACM Transactions on Database Systems , 4 : 7 – 18 .
   Google Scholar
• Denning , D. E. and Schlörer , J. 1980 . “A Fast Procedure for Finding a Tracker in a Statistical Database” . ACM Transactions on Database Systems , 5 : 88 – 102 .
   Google Scholar
• Dobkin , D. , Jones , A. K. and Lipton , R. J. 1979 . “Secure Databases: Protection Against User Influence” . ACM Transactions on Database Systems , 4 : 97 – 106 .
   Google Scholar
• Duncan , G. T. , Jabine , T. B. and de Wolf , V. A. 1993 . Private Lives and Public Policies: Confidentiality and Accessibility of Government Statistics , Washington , DC : National Academy Press .
   Google Scholar
• Duncan , G. T. and Lambert , D. 1986 . “Disclosure–Limited Data Dissemination” . Journal of the American Statistical Association , 81 : 10 – 28 . (with discussion)
   Web of Science ®Google Scholar
• Uncan , G. T. and Lambert , D. 1989 . “The Risk of Disclosure of Microdata” . Journal of Business and Economic Statistics , 7 : 207 – 217 .
   Web of Science ®Google Scholar
• Duncan , G. T. and Mukherjee , S. “Microdata Disclosure Limitation in Statistical Databases: Query Size Restriction and Random Sample Query Control,” . Proceedings of the 1991 IEEE Computer Society Symposium on Research in Security and Privacy . pp. 278 – 287 .
   Google Scholar
• Duncan , G. T. and Mukherjee , S. 1992 . “Disclosure Limitation in Statistical Databases Using Autoregressive Noise,” . In Database Security VI: Status and Prospects , Edited by: Landwehr , C. and Thuraisingham , B. 211 – 224 . Amsterdam : North-Holland .
   Google Scholar
• Duncan , G. T. and Pearson , R. W. 1991 . “Enhancing Access to Data While Protecting Confidentiality: Prospects for the Future” . Statistical Science , 6 : 219 – 239 .
   Google Scholar
• Fellegi , I. P. 1972 . “On the Question of Statistical Confidentiality” . Journal of the American Statistical Association , 67 : 7 – 18 .
   Web of Science ®Google Scholar
• Frank , O. 1976 . “Individual Disclosures From Frequency Tables,” . In Personal Integrity and the Need for Data in the Social Sciences , Edited by: Dalenius , T. and Klevmarken , A. 175 – 187 . Stockholm : Swedish Council for Social Science Research .
   Google Scholar
• Frank , O. 1978 . “An Application of Information Theory to the Problem of Statistical Disclosure” . Journal of Statistical Planning and Inference , 2 : 143 – 152 .
   Web of Science ®Google Scholar
• Frank , O. 1983 . “Statistical Disclosure Control” . Statistical Review , 5 : 173 – 178 .
   Google Scholar
• Friedman , A. D. and Hoffman , L. J. “Towards a Fail-safe Approach to Statistical Databases,” . Proceedings of IEEE Symposium on Security and Privacy . pp. 18 – 21 .
   Google Scholar
• Fuller , W. A. 1993 . “Masking Procedures for Microdata Disclosure Limitation” . Journal of Official Statistics , 9 : 383 – 406 .
   Google Scholar
• Jabine , T. B. 1993 . “Statistical Disclosure Limitation Practices of the United State Statistical Agencies” . Journal of Official Statistics , 9 : 427 – 454 .
   Google Scholar
• Javitz , H. S. and Valdes , A. “The SRI IDES Statistical Anomaly Detector,” . Proceedings of the IEEE Symposium on Research in Security and Privacy . pp. 316 – 326 .
   Google Scholar
• Keller-McNulty , S. , McNulty , M. S. and Unger , E. A. “The Protection of Confidential Data,” . Proceedings of the 21st Symposium on the Interface, American Statistical Association . pp. 215 – 219 .
   Google Scholar
• Keller-McNulty , S. and Unger , E. A. 1993 . “Database Systems: Inferential Security” . Journal of Official Statistics , 9 : 475 – 500 .
   Google Scholar
• Kim , J. J. “A Method for Limiting Disclosure in Microdata Based on Random Noise and Transformation,” . Proceedings of the Survey Research Methods Section, American Statistical Association . pp. 456 – 461 .
   Google Scholar
• Lambert , D. 1993 . “Measures of Disclosure Risk and Harm” . Journal of Official Statistics , 9 : 313 – 331 .
   Google Scholar
• Matloff , N. S. “Another Look at Noise Addition for Database Security,” . Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy . pp. 173 – 180 .
   Google Scholar
• Michalewicz , Z. , Li , J. and Chen , K. “Ranges and Trackers in Statistical Databases,” . Proceedings of the 5th International Conference on Statistical and Scientific Databases . pp. 65 – 79 . (Springer-Verlag Lecture Notes on Computer Science No. 420)
   Google Scholar
• Mukherjee , S. 1998 . “Should Non-Sensitive Attributes be Masked? Data Quality Implications of Data Perturbation in Regression Analysis” . Proceedings of the Thirty-First Annual Hawaii International Conference on System Sciences , 6 : 223 – 231 .
   Google Scholar
• Paass , G. 1988 . “Disclosure Risk and Disclosure Avoidance for Microdata” . Journal of Business and Economic Statistics , 6 : 487 – 500 .
   Web of Science ®Google Scholar
• Rainwater , L. and Smeeding , T. M. 1988 . “The Luxembourg Income Study: The Use of International Telecommunications in Comparative Social Research” . Annals of the American Academy of Political and Social Science , 495 : 95 – 105 .
   Web of Science ®Google Scholar
• Schlörer , J. 1975 . “Identification and Retrieval of Personal Records from Statistical Databank” . Methods of Information in Medicine , 14 : 7 – 13 .
   PubMed Web of Science ®Google Scholar
• Schlörer , J. 1980 . “Disclosure from Statistical Databases: Quantitative Aspects of Trackers” . ACM Transactions on Database Systems , 5 : 467 – 492 .
   Google Scholar
• Spruill , N. L. and Gastwirth , J. L. 1982 . “On the Estimation of the Correlation Coefficient from Grouped Data” . Journal of the American Statistical Association , 77 : 614 – 620 .
   Web of Science ®Google Scholar
• Tendick , P. 1991 . “Optimal Noise Addition for the Preservation of Confidentiality in Multivariate Data” . Journal of Statistical Planning and Inference , 27 : 342 – 353 .
   Web of Science ®Google Scholar
• Tendick , P. and Matloff , N. 1994 . “A Modified Random Perturbation Method for Database Security” . ACM Transactions on Database Systems , 19 : 47 – 63 .
   Web of Science ®Google Scholar
• Willenborg , L. and de Waal , T. 1996 . Statistical Disclosure Control in Practice , New York : Springer-Verlag . 1996
   Google Scholar