Database Anonymization: Privacy Models, Data Utility, and Microaggregation-based Inter-model Connections

丛 书 名：Synthesis Lectures on Information Security, Privacy, and Trust

版本说明：Database anonymization : privacy models, data utility, and microaggregation-based inter-model connections /

作     者：Domingo-Ferrer, Josep Sanchez, David Soria-Comas, Jordi 

I S B N：(纸本) 9781627058438 

出 版 社：Morgan & Claypool Publishers 

出 版 年：2016年

主 题 词：Computer Security 

学科分类：0810[工学-信息与通信工程] 08[工学] 080401[工学-精密仪器及机械] 0804[工学-仪器科学与技术] 080402[工学-测试计量技术及仪器] 0835[工学-软件工程] 081002[工学-信号与信息处理] 0812[工学-计算机科学与技术（可授工学、理学学位）] 

摘      要：The current social and economic context increasingly demands open data to improve scientific research and decision making. However, when published data refer to individual respondents, disclosure risk limitation techniques must be implemented to anonymize the data and guarantee by design the fundamental right to privacy of the subjects the data refer to. Disclosure risk limitation has a long record in the statistical and computer science research communities, who have developed a variety of privacy-preserving solutions for data releases. This Synthesis Lecture provides a comprehensive overview of the fundamentals of privacy in data releases focusing on the computer science perspective. Specifically, we detail the privacy models, anonymization methods, and utility and risk metrics that have been proposed so far in the literature. Besides, as a more advanced topic, we identify and discuss in detail connections between several privacy models (i.e., how to accumulate the privacy guarantees they offer to achieve more robust protection and when such guarantees are equivalent or complementary); we also explore the links between anonymization methods and privacy models (how anonymization methods can be used to enforce privacy models and thereby offer ex ante privacy guarantees). These latter topics are relevant to researchers and advanced practitioners, who will gain a deeper understanding on the available data anonymization solutions and the privacy guarantees they can offer.