Auditing Sum Queries
نویسندگان
چکیده
In an on-line statistical database, the query system should leave unanswered queries asking for sums that could lead to the disclosure of confidential data. To check that, every sum query and previously answered sum queries should be audited. We show that, under a suitable query-overlap restriction, an auditing procedure can be efficiently worked out using flow-network computation.
منابع مشابه
Computational Issues Connected with the Protection of Sensitive Statistics by Auditing Sum Queries
An implementation of the auditing strategy is presented to avoid both exact and approximate disclosure. The key data structure is a query map, which is a graphical summary of answered queries. Since the size of a query map may be exponential in the number of answered queries, a queryrestriction criterion is introduced to make every query map a graph. An auditing procedure on such a graph is pre...
متن کاملComputational complexity of auditing finite attributes in statistical databases
We study the computational complexity of auditing finite attributes in databases allowing statistical queries. Given a database that supports statistical queries, the auditing problem is to check whether an attribute can be completely determined or not from a given set of statistical information. Some restricted cases of this problem have been investigated earlier, e.g. the complexity of statis...
متن کاملDifferential Privacy for Sum Queries without External Noise
We consider privacy issues in statistical database and data mining where queries are executed on data collected from a large number of individuals. It is generally established that a strong notion of privacy is guaranteed if the results are perturbed by random noise with sufficient variance (e.g., [5, 27, 44]). In this paper, we point out a vulnerability in such an approach and show that for so...
متن کاملAuditing Categorical SUM, MAX and MIN Queries
Auditing consists in logging answered queries and checking, each time that a new query is submitted, that no sensitive information is disclosed by combining responses to answered queries with the response to the current query. Such a method for controlling data disclosure naturally raises the following inference problem: Given a set Q of answered queries and a query q, is the information asked ...
متن کاملWorking Paper No. 2 ENGLISH ONLY UNITED NATIONS STATISTICAL COMMISSION and ECONOMIC COMMISSION FOR EUROPE CONFERENCE OF EUROPEAN STATISTICIANS EUROPEAN COMMISSION STATISTICAL OFFICE OF THE EUROPEAN COMMUNITIES (EUROSTAT)
In a statistical database, the query-answering system should leave unanswered sum-queries that could lead to the disclosure of confidential data. To this end, each sum-query and previously answered sum-queries should be audited. We give a general framework for controlling the amount of information released when sum-queries are answered, both from the viewpoint of the user and from the viewpoint...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2003