On sampling, anonymization, and differential privacy or, <i>k</i> -anonymization meets differential privacy

Ninghui Li, Wahbeh Qardaji, Dong Su

2012 · 205 citations · 5 references

Concepts

TL;DR

k‑Anonymization methods have been studied extensively in the database community, yet they are known to lack strong privacy guarantees. The paper investigates two questions: what formal privacy guarantee, if any, k‑anonymization provides, and whether exploiting the adversary’s uncertainty about the data can yield a meaningful relaxation of differential privacy. The authors elaborate on these two motivations in detail.

Abstract

This paper aims at answering the following two questions in privacy-preserving data analysis and publishing. The first is: What formal privacy guarantee (if any) does k-anonymization methods provide? k-Anonymization methods have been studied extensively in the database community, but have been known to lack strong privacy guarantees. The second question is: How can we benefit from the adversary's uncertainty about the data? More specifically, can we come up a meaningful relaxation of differential privacy [2, 3] by exploiting the adversary's uncertainty about the dataset? We now discuss these two motivations in more detail.

References

5