Inference of three-way table entries from two-dimensional projections

Multi-dimensional tables of sensitive information are often summarized and made public by means of lower-dimensional projections, which are intended do prevent any disclosure of confidential data. Multiple projections of the same underlying table are linked over common attributes, however, so there is concern about the possibility of recovering sensitive data by combining projections. The authors present an algorithm that gives tight upper and lower bounds on cell values of three-dimensional data when the three two-dimensional projections of that data are available.

[1]  L. Cox.  A Constructive Procedure for Unbiased Controlled Rounding , 1987 .

[2]  W. Patefield,et al.  An Efficient Method of Generating Random R × C Tables with Given Row and Column Totals , 1981 .

[3]  Lawrence H. Cox,et al.  Network Models for Complementary Cell Suppression , 1995 .

[4]  P H Rees,et al.  Methods for estimating missing data on migrants in the 1991 British census. , 1997, International journal of population geography : IJPG.

[5]  Nabil R. Adam,et al.  Security-control methods for statistical databases: a comparative study , 1989, ACM Comput. Surv..

[6]  George T. Duncan,et al.  Disclosure-Limited Data Dissemination , 1986 .

[7]  S L Warner,et al.  Randomized response: a survey technique for eliminating evasive answer bias. , 1965, Journal of the American Statistical Association.

[8]  S. Reiss,et al.  Data-swapping: A technique for disclosure control , 1982 .

[9]  Ivan P. Fellegi,et al.  On the Question of Statistical Confidentiality , 1972 .

[10]  P. Diaconis,et al.  Rectangular Arrays with Fixed Margins , 1995 .

[11]  G. Duncan,et al.  Private Lives and Public Policies: Confidentiality and Accessibility of Government Statistics , 1993 .

[12]  L. Cox.  Suppression Methodology and Statistical Disclosure Control , 1980 .

[13]  Stephen E. Fienberg,et al.  STATISTICAL NOTIONS OF DATA DISCLOSURE AVOIDANCE AND THEIR RELATIONSHIP TO TRADITIONAL STATISTICAL METHODOLOGY: DATA SWAPPING AND LOGLINEAR MODELS , 1996 .

[14]  Ramayya Krishnan,et al.  Disclosure Detection in Multivariate Categorical Databases: Auditing Confidentiality Protection Through Two New Matrix Operators , 1999 .

[15]  P. Diaconis,et al.  Algebraic algorithms for sampling from conditional distributions , 1998 .

[16]  Stephen E. Fienberg,et al.  Discrete Multivariate Analysis: Theory and Practice , 1976 .

[17]  James P. Kelly,et al.  Cell suppression: Disclosure protection for sensitive tabular data , 1992, Networks.

[18]  Carl-Erik Särndal,et al.  Model Assisted Survey Sampling , 1997 .