When tables of quantitative data are generated from a datafile, the release of those tables should not reveal information concerning individual respondents. This disclosure of individual respondents in the microdata file can be prevented by applying disclosure control methods at the table level, but this may create inconsistencies across tables. Alternatively, disclosure control methods can be ...

Masking methods protect data sets against disclosure by perturbing the original values before publication. Masking causes some information loss (masked data are not exactly the same as original data) and does not completely suppress the risk of disclosure for the individuals behind the data set. Information loss can be measured by observing the differences between original and masked data while...

I draw on my own experiences as a straight feminist geographer to address questions regarding teaching sexualities in geography. First, I look at `sexing’ and `queering’ geography curricula, not only upper level undergraduate and graduate courses that lend themselves to discussions of sexualities, compulsory heterosexuality, and heterosexism, but also lower level undergraduate courses. Second, ...

Two security domains that want to exchange information securely may need to agree on translations of Mandatory Access Control (MAC) labels of their information, if their MAC labels have a different syntax or semantics. It is desirable that these translations do not introduce any confidentiality violations. In this paper we present a property, the Security Level Translation Property (SLTP), whic...

When publishing data containing oocial statistics, a need to preserve statistical conndentiality arises. Statistical disclosure of individuals' data must be prevented. There is a wide choice of techniques to achieve this anonymization: data perturbation, data suppression, etc. In this paper, we tackle the problem of using anonymized data to compute exact statistics; the goal is for a classiied ...

The authors tested two theoretical explanations for the attractionenhancing effects of counselor self-disclosure: the similarity hypothesis and the social exchange hypothesis. A counseling analogue was constructed to discriminate between these two explanations by varying the valence (positive or negative) of the counselor’s disclosure and its relevance (relevant or irrelevant) to the client’s p...

This paper provides a review of common statistical disclosure control (SDC) methods implemented at Statistical Agencies for standard tabular outputs containing whole population counts from a Census (either enumerated or based on a register). These methods include record swapping on the microdata prior to its tabulation and rounding of entries in the tables after they are produced. The approach ...