A posteriori disclosure risk measure for tabular data based on conditional entropy

• Autores: Anna Oganian, Josep Domingo i Ferrer
• Localización: Sort: Statistics and Operations Research Transactions, ISSN 1696-2281, Vol. 27, Nº. 2, 2003, págs. 175-190
• Idioma: inglés
• Títulos paralelos:
  • Medida del riesgo de revelación a posteriori para datos tabulares basada en entropía condicional.
• Enlaces
  • Texto completo (pdf)
• Resumen

  • Statistical database protection, also known as Statistical Disclosure Control (SDC), is a part of information security which tries to prevent published statistical information (tables, individual records) from disclosing the contribution of specific respondents. This paper deals with the assessment of the disclosure risk associated to the release of tabular data. So-called sensitivity rules are currently being used to measure the disclosure risk for tables. This rules operate on an a priori basis: the data are examined and the rules are used to decide whether the data can be released as they stand or should rather be protected. In this paper, we propose to complement a priori risk assessment with a posteriori risk assessment in order to achieve a higher level of security, that is, we propose to take the protected information into account when measuring the disclosure risk.

    The proposed a posteriori disclosure risk measure is compatible with a broad class of disclosure protection methods and can be extended for computing disclosure risk for a set of linked tables. In the case of linked table protection via cell supression, the proposed measure allows detection of secondary supression patterns which offer more protection than others.

• Referencias bibliográficas
  • Cox, L. H. (2001). Disclosure risk for tabular economic data, in Confidentiality, Disclosure and Data Access, eds. P. Doyle, J. Lane, J. Theeuwes...
  • Denning, D. E. (1982). Cryptography and Data Security. Reading, MA: AddisonWesley.
  • Domingo-Ferrer, J. and Torra, V. (2002). A critique of the sensitivity rules usually employed for statistical table protection, in International...
  • Duncan, G. T., Fienberg, S. E., Krishnan, R., Padman, R. and Roehrig, S. F. (2001). Disclosure limitation methods and information loss for...
  • Felsö, F., Theeuwes, J. and Wagner, G. G. (2001). Disclosure limitation methods in use: Results of a survey, in Confidentiality, Disclosure...
  • Fienberg, S. E., Makov, U. E. and Steele, R. J. (1998). Disclosure limitation using perturbation and related methods for categorical data,...
  • Giessing, S. (2001). Nonperturbative disclosure control methods for tabular data, in Confidentiality, Disclosure and Data Access, eds. P....
  • Holvast, J. (1999). Statistical dissemination, confidentiality and disclosure, in Proceedings of the Joint Eurostat/UNECE Work Session on...
  • Luige, T. and Meliskova, J. (1999). Confidentiality practices in the transition countries, in Proceedings of the Joint Eurostat/UNECE Work...
  • Robertson, D. and Ethier, R. (2002). Cell suppression: Theory and experience, in Inference Control in Statistical Databases, LNCS 2316, ed....
  • Shannon, C. E. (1948). A mathematical theory of communication, Bell System Technical Journal, 27, 379- 423, 623-656, July and Oct. 1948.
  • Willenborg, L. and de Waal, T. (2001). Statistical Disclosure Control in Practice. New York: SpringerVerlag.