Anonymizing sequential releases
Top Cited Papers
- 20 August 2006
- proceedings article
- Published by Association for Computing Machinery (ACM)
- p. 414-423
- https://doi.org/10.1145/1150402.1150449
Abstract
An organization makes a new release as new information become available, releases a tailored view for each data request, releases sensitive information and identifying information separately. The availability of related releases sharpens the identification of indi-viduals by a global quasi-identifier consisting of attributes from re-lated releases. Since it is not an option to anonymize previously released data, the current release must be anonymized to ensure that a global quasi-identifier is not effective for identification. In this paper, we study the sequential anonymization problem under this assumption. A key question is how to anonymize the current release so that it cannot be linked to previous releases yet remains useful for its own release purpose. We introduce the lossy join, a negative property in relational database design, as a way to hide the join relationship among releases, and propose a scalable and practical solution.Keywords
This publication has 20 references indexed in Scilit:
- Handicapping attacker's confidence: an alternative to k-anonymizationKnowledge and Information Systems, 2006
- IncognitoPublished by Association for Computing Machinery (ACM) ,2005
- Integrating Private Databases for Data AnalysisPublished by Springer Nature ,2005
- On the complexity of optimal K-anonymityPublished by Association for Computing Machinery (ACM) ,2004
- How (not) to protect genomic data privacy in a distributed network: using trail re-identification to evaluate and design anonymity protection systemsJournal of Biomedical Informatics, 2004
- Anonymizing TablesPublished by Springer Nature ,2004
- Privacy in Database PublishingPublished by Springer Nature ,2004
- k-ANONYMITY: A MODEL FOR PROTECTING PRIVACYInternational Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 2002
- Protecting respondents identities in microdata releaseIEEE Transactions on Knowledge and Data Engineering, 2001
- A Mathematical Theory of CommunicationBell System Technical Journal, 1948