Accounting for intruder uncertainty due to sampling when estimating identification disclosure risks in partially synthetic data

Abstract

"Partially synthetic data comprise the units originally surveyed with some collected values, such as sensitive values at high risk of disclosure or values of key identifiers, replaced with multiple draws from statistical models. Because the original records remain an the file, intruders may be able to link those records to external databases, even though values are synthesized. We illustrate how statistical agencies can evaluate the risks of identification disclosures before releasing such data. We compute risk measures when intruders know who is in the sample and when the intruders do not know who is in the sample. We use classification and regression trees to synthesize data from the U.S. Current Population Survey." (Author's abstract, IAB-Doku) ((en))

Cite article

Drechsler, J. & Reiter, J. (2008): Accounting for intruder uncertainty due to sampling when estimating identification disclosure risks in partially synthetic data. In: J. Domingo-Ferrer & Y. Saygin (Hrsg.) (2008): Privacy in statistical databases : UNESCO Chair in Data Privacy International Conference, PSD 2008, Istanbul, Turkey, September 24-26, 2008. Proceedings (Lecture notes in computer science, 5262), p. 227-238.