Abstract
A number of methods have been proposed in the literature for masking (protecting) microdata. Nearly all of these methods may be implemented with different degrees of intensity, by setting the value of an appropriate parameter. However, even parameter variation may not be sufficient to realize appropriate levels of disclosure risk and data utility. In this paper we propose a new approach to protection of numerical microdata: applying multiple stages of masking to the data in a way that increases utility but controls disclosure risk.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Anwar, N.: Micro-aggregation—the small aggregates method, Research Report. Eurostat, Luxembourg (1993)
Brand, R.: Microdata protection through noise. In: Domingo-Ferrer, J. (ed.) Inference Control in Statistical Databases. LNCS, vol. 2316, pp. 97–116. Springer, Heidelberg (2002)
Dalenius, T., Reiss, S.P.: Data-swapping: A technique for disclosure control. Journal of Statistical Planning and Inference 6, 73–85 (1982)
Defays, D., Anwar, N.: Micro-aggregation: a generic method. In: Proceedings of the 2nd International Symposium on Statistical Confidentiality, pp. 69–78. Office for Official Publications of the European Communities, Luxembourg (1995)
Defays, D., Nanopoulos, P.: Panels of enterprises and confidentiality: the small aggregates method. In: Proceedings of the 92 Symposium on Design and Analysis of Longitudinal Surveys, pp. 195–204. Statistics Canada, Ottawa (1993)
Dobra, A., Fienberg, S.E., Karr, A.F., Sanil, A.P.: Software systems for tabular data releases. International Journal on Uncertainty, Fuzziness and Knowledge-based Systems 10(5), 529–544 (2002)
Domingo-Ferrer, J., Mateo-Sanz, J.M.: On resampling for statistical confidentiality in contingency tables. Computers and Mathematics with Applications 38, 13–32 (1999)
Domingo-Ferrer, J., Mateo-Sanz, J.M., Oganian, A., Torres, A.: On the security of microaggregation with individual ranking: analytical attacks. International Journal on Uncertainty, Fuzziness and Knowledge-based Systems 10(5), 477–492 (2002)
Domingo-Ferrer, J., Mateo-Sanz, J.M., Torra, V.: Comparing SDC methods for microdata on the basis of information loss and disclosure risk of disclosure control methods. In: Proc. of ETK–NTTS 2002, pp. 807–825. Eurostat, Luxembourg (2001)
Gomatam, S., Karr, A.F., Sanil, A.P.: Data swapping as a decision problem. Journal of Official Statistics (to appear, 2006), available online at www.niss.org/dgii/technicalreports.html
Jaro, M.A.: Advances in record-linkage methodology as applied to matching the 1985 Census of Tampa, Florida. Journal of the American Statistical Association 84, 414–420 (1989)
Heer, G.R.: A Bootstrap procedure to preserve statistical confidentiality in contingency tables. In: Lievesley, D. (ed.) Proceedings of the International Seminar on Statistical Confidentiality, pp. 261–271. Office for Official Publications of the European Communities, Luxembourg (1993)
Karr, A.F., Kohnen, C.N., Oganian, A., Reiter, J.P., Sanil, A.P.: A framework for evaluating the utility of data altered to protect confidentiality. The American Statistician 60(3), 224–232 (2006)
Kim, J.J.: A method for limiting disclosure in microdata based on random noise and transformation. In: Proceedings of the ASA Section on Survey Research Methodology, pp. 303–308. American Statistical Association, Alexandria VA (1986)
Kung, H.T., Luccio, F., Preparata, F.P.: On finding the maxima of a set of vectors. J. ACM 22, 469–476 (1975)
Little, R.J.A.: Statistical analysis of masked data. Journal of Official Statistics 9, 407–426 (1993)
Mateo-Sanz, J.M., Domingo-Ferrer, J.: A method for data-oriented multivariate microaggregation. In: Proceedings of Statistical Data Protection 1998, pp. 89–99. Office for Official Publications of the European Communities, Luxembourg (1999)
Moor, R.: Controlled data swapping techniques for masking public use microdata sets. U.S. Census Bureau (1996)
Oganian, A.: Security and Information Loss in Statistical Database Protection. Ph. D. thesis, Universitat Politecnica de Catalunya (2004)
Oganian, A., Domingo-Ferrer, J.: On the complexity of optimal microaggregation for statistical disclosure control. Statistical Journal of the United Nations Economic Commission for Europe 18(4), 345–353 (2001)
Pagliuca, D., Seri, G.: Some results of individual ranking method on the system of enterprise accounts annual survey. Esprit SDC Project, Deliverable MI-3/D2 (1999)
Sullivan, G., Fuller, W.A.: The use of measurement error to avoid disclosure. In: Proceedings of the ASA Section on Survey Research Methodology, pp. 802–807. American Statistical Association, Alexandria VA (1989)
Tendik, P., Matloff, N.: A modified random perturbation method for database security. ACM Transactions on Database Systems 19(1), 47–63 (1994)
Woo, M.-J., Reiter, J.P., Oganian, A., Karr, A.F.: Global measures of data usefulness for microdata altered for disclosure limitation. Technical Report, National Institute of Statistical Sciences (2006)
Yancey, W.E., Winkler, W.E., Creecy, R.H.: Disclosure risk assessment in perturbative microdata protection. In: Domingo-Ferrer (ed.) Inference Control in Statistical Databases, pp. 135–152. Springer, Berlin
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2006 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Oganian, A., Karr, A.F. (2006). Combinations of SDC Methods for Microdata Protection. In: Domingo-Ferrer, J., Franconi, L. (eds) Privacy in Statistical Databases. PSD 2006. Lecture Notes in Computer Science, vol 4302. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11930242_10
Download citation
DOI: https://doi.org/10.1007/11930242_10
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-49330-3
Online ISBN: 978-3-540-49332-7
eBook Packages: Computer ScienceComputer Science (R0)