L -diversity
Top Cited Papers
- 1 March 2007
- journal article
- Published by Association for Computing Machinery (ACM) in ACM Transactions on Knowledge Discovery From Data
- Vol. 1 (1) , 3
- https://doi.org/10.1145/1217299.1217302
Abstract
Publishing data about individuals without revealing sensitive information about them is an important problem. In recent years, a new definition of privacy called k -anonymity has gained popularity. In a k -anonymized dataset, each record is indistinguishable from at least k − 1 other records with respect to certain identifying attributes. In this article, we show using two simple attacks that a k -anonymized dataset has some subtle but severe privacy problems. First, an attacker can discover the values of sensitive attributes when there is little diversity in those sensitive attributes. This is a known problem. Second, attackers often have background knowledge, and we show that k -anonymity does not guarantee privacy against attackers using background knowledge. We give a detailed analysis of these two attacks, and we propose a novel and powerful privacy criterion called ℓ-diversity that can defend against such attacks. In addition to building a formal foundation for ℓ-diversity, we show in an experimental evaluation that ℓ-diversity is practical and can be implemented efficiently.Keywords
This publication has 47 references indexed in Scilit:
- Network Models for Complementary Cell SuppressionJournal of the American Statistical Association, 1995
- Security problems on inference control for SUM, MAX, and MIN queriesJournal of the ACM, 1986
- The statistical security of a statistical databaseACM Transactions on Database Systems, 1984
- A security machanism for statistical databaseACM Transactions on Database Systems, 1980
- Secure statistical databases with random sample queriesACM Transactions on Database Systems, 1980
- Suppression Methodology and Statistical Disclosure ControlJournal of the American Statistical Association, 1980
- The trackerACM Transactions on Database Systems, 1979
- On the Question of Statistical ConfidentialityJournal of the American Statistical Association, 1972
- The Linear Randomized Response ModelJournal of the American Statistical Association, 1971
- Randomized Response: A Survey Technique for Eliminating Evasive Answer BiasJournal of the American Statistical Association, 1965