Flexible and scalable privacy assessment for very large datasets, with an application to official governmental microdata
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2022
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909313696530432 |
|---|---|
| author | Alvim, Mário S. Fernandes, Natasha McIver, Annabelle Morgan, Carroll Nunes, Gabriel H. |
| author_facet | Alvim, Mário S. Fernandes, Natasha McIver, Annabelle Morgan, Carroll Nunes, Gabriel H. |
| contents | We present a systematic refactoring of the conventional treatment of privacy analyses, basing it on mathematical concepts from the framework of Quantitative Information Flow (QIF). The approach we suggest brings three principal advantages: it is flexible, allowing for precise quantification and comparison of privacy risks for attacks both known and novel; it can be computationally tractable for very large, longitudinal datasets; and its results are explainable both to politicians and to the general public. We apply our approach to a very large case study: the Educational Censuses of Brazil, curated by the governmental agency INEP, which comprise over 90 attributes of approximately 50 million individuals released longitudinally every year since 2007. These datasets have only very recently (2018-2021) attracted legislation to regulate their privacy -- while at the same time continuing to maintain the openness that had been sought in Brazilian society. INEP's reaction to that legislation was the genesis of our project with them. In our conclusions here we share the scientific, technical, and communication lessons we learned in the process. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2204_13734 |
| institution | arXiv |
| publishDate | 2022 |
| record_format | arxiv |
| spellingShingle | Flexible and scalable privacy assessment for very large datasets, with an application to official governmental microdata Alvim, Mário S. Fernandes, Natasha McIver, Annabelle Morgan, Carroll Nunes, Gabriel H. Cryptography and Security We present a systematic refactoring of the conventional treatment of privacy analyses, basing it on mathematical concepts from the framework of Quantitative Information Flow (QIF). The approach we suggest brings three principal advantages: it is flexible, allowing for precise quantification and comparison of privacy risks for attacks both known and novel; it can be computationally tractable for very large, longitudinal datasets; and its results are explainable both to politicians and to the general public. We apply our approach to a very large case study: the Educational Censuses of Brazil, curated by the governmental agency INEP, which comprise over 90 attributes of approximately 50 million individuals released longitudinally every year since 2007. These datasets have only very recently (2018-2021) attracted legislation to regulate their privacy -- while at the same time continuing to maintain the openness that had been sought in Brazilian society. INEP's reaction to that legislation was the genesis of our project with them. In our conclusions here we share the scientific, technical, and communication lessons we learned in the process. |
| title | Flexible and scalable privacy assessment for very large datasets, with an application to official governmental microdata |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2204.13734 |