arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1701.00752cs.CYcs.CR
收藏

联邦统计机构的隐私保护数据分析

Privacy-Preserving Data Analysis for the Federal Statistical Agencies

John Abowd, Lorenzo Alvisi, Cynthia Dwork, Sampath Kannan, Ashwin Machanavajjhala, Jerome Reiter

摘要:

政府统计机构收集有关国家人口和商业活动的大量宝贵数据。广泛获取这些数据可以促进循证决策,支持改善社会的新研究,促进对学生进行数据科学培训,并为公众提供资源,以更好地了解和参与社会。这些数据也影响到私营部门。例如,美国劳工统计局发布的《美国就业形势》就牵动着市场。尽管如此,政府机构正面临越来越大的压力,要求限制对数据的访问,因为人们越来越了解对数据隐私和机密性的威胁。“去识别化”-去除明显的标识符,如姓名、地址和身份证号码-在现代计算和信息资源面前已经被发现是不够的。不幸的是,这个问题甚至延伸到发布汇总数据统计。这种违反直觉的现象被称为信息恢复的基本定律。它说,对太多统计数据过于准确的估计可能会完全破坏隐私。人们可能会认为这是千刀万剐。从数据集中计算出的每个统计量都会泄露关于数据集中每个成员的少量信息-一个微小的切口。即使为了保护隐私,统计数据的确切值有点失真,这也是正确的。但是,尽管每次统计数据的发布对任何个人的隐私风险来说都是一个几乎无害的小削减,但累积效应可能会完全损害某些个人的隐私。

英文摘要:

Government statistical agencies collect enormously valuable data on the nation's population and business activities. Wide access to these data enables evidence-based policy making, supports new research that improves society, facilitates training for students in data science, and provides resources for the public to better understand and participate in their society. These data also affect the private sector. For example, the Employment Situation in the United States, published by the Bureau of Labor Statistics, moves markets. Nonetheless, government agencies are under increasing pressure to limit access to data because of a growing understanding of the threats to data privacy and confidentiality. "De-identification" - stripping obvious identifiers like names, addresses, and identification numbers - has been found inadequate in the face of modern computational and informational resources. Unfortunately, the problem extends even to the release of aggregate data statistics. This counter-intuitive phenomenon has come to be known as the Fundamental Law of Information Recovery. It says that overly accurate estimates of too many statistics can completely destroy privacy. One may think of this as death by a thousand cuts. Every statistic computed from a data set leaks a small amount of information about each member of the data set - a tiny cut. This is true even if the exact value of the statistic is distorted a bit in order to preserve privacy. But while each statistical release is an almost harmless little cut in terms of privacy risk for any individual, the cumulative effect can be to completely compromise the privacy of some individuals.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑