This paper considers the problem of providing security to statistical databases against
disclosure of confidential information. Security-control methods suggested in the literature …

Efforts to build" secure" computer systems have now been underway for more than a
decade. Many designs have been proposed, some prototypes have been constructed, and a …

We report on the largest corpus of user-chosen passwords ever studied, consisting of
anonymized password histograms representing almost 70 million Yahoo! users, mitigating …

Privacy and data protection constitute core values of individuals and of democratic societies.
There have been decades of debate on how those values-and legal obligations-can be …

Over the past five years a new approach to privacy-preserving data analysis has born fruit
[13, 18, 7, 19, 5, 37, 35, 8, 32]. This approach differs from much (but not all!) of the related …

Consider a data holder, such as a hospital or a bank, that has a privately held collection of
person-specific, field structured data. Suppose the data holder wants to share a version of …

Publishing data about individuals without revealing sensitive information about them is an
important problem. In recent years, a new definition of privacy called k-anonymity has …

A fruitful direction for future data mining research will be the development of techniques that
incorporate privacy concerns. Specifically, we address the following question. Since the …

Electronic computers have evolved from exiguous experimental enterprises in the 1940s to
prolific practical data processing systems in the 1980s. As we have come to rely on these …

We examine the tradeoff between privacy and usability of statistical databases. We model a
statistical database by an n-bit string d 1,.., dn, with a query being a subset q⊆[n] to be …