DMCA
Security-control methods for statistical databases: a comparative study (1989)
| Venue: | ACM Computing Surveys |
| Citations: | 412 - 0 self |
BibTeX
@ARTICLE{Adam89security-controlmethods,
author = {Nabil R. Adam and John C. Wortmann},
title = {Security-control methods for statistical databases: a comparative study},
journal = {ACM Computing Surveys},
year = {1989},
volume = {21},
pages = {515--556}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
This paper considers the problem of providing security to statistical databases against disclosure of confidential information. Security-control methods suggested in the literature are classified into four general approaches: conceptual, query restriction, data perturbation, and output perturbation. Criteria for evaluating the performance of the various security-control methods are identified. Security-control methods that are based on each of the four approaches are discussed, together with their performance with respect to the identified evaluation criteria. A detailed comparative analysis of the most promising methods for protecting dynamic-online statistical databases is also presented. To date no single security-control method prevents both exact and partial disclosures. There are, however, a few perturbation-based methods that prevent exact disclosure and enable the database administrator to exercise “statistical disclosure control. ” Some of these methods, however introduce bias into query responses or suffer from the O/l query-set-size problem (i.e., partial disclosure is possible in case of null query set or a query set of size 1). We recommend directing future research efforts toward developing new methods that prevent exact disclosure and provide statistical-disclosure control, while at the same time do not suffer from the bias problem and the O/l query-set-size problem. Furthermore, efforts directed toward developing a bias-correction mechanism and solving the general problem of small query-set-size would help salvage a few of the current perturbation-based methods.
Keyphrases
security-control method statistical database comparative study partial disclosure exact disclosure query-set-size problem statistical disclosure control query set new method confidential information data perturbation perturbation-based method null query set query response statistical-disclosure control output perturbation single security-control method prevents general problem general approach small query-set-size promising method detailed comparative analysis dynamic-online statistical database future research effort database administrator evaluation criterion bias-correction mechanism bias problem query restriction current perturbation-based method various security-control method
