Abstract:In crowdsourcing database, human operators are embedded into the database engine and collaborate with other conventional database operators to process the queries. Each human operator publishes small HITs (Human Intelligent Task) to the crowdsourcing platform, which consists of a set of database records and corresponding questions for human workers. The human workers complete the HITs and return the results to the crowdsourcing database for further processing. In practice, published records in HITs may contain sensitive attributes, probably causing privacy leakage so that malicious workers could link them with other public databases to reveal individual private information. Conventional privacy protection techniques, such as K-Anonymity , can be applied to partially solve the problem. However, after generalizing the data, the result of standard K-Anonymity algorithms may render uncontrollable information loss and affects the accuracy of crowdsourcing. In this paper, we first study the tradeoff between the privacy and accuracy for the human operator within data anonymization process. A probability model is proposed to estimate the lower bound and upper bound of the accuracy for general K-Anonymity approaches. We show that searching the optimal anonymity approach is NP-Hard and only heuristic approach is available. The second contribution of the paper is a general feedback-based K-Anonymity scheme. In our scheme, synthetic samples are published to the human workers, the results of which are used to guide the selection on anonymity strategies. We apply the scheme on Mondrian algorithm by adaptively cutting the dimensions based on our feedback results on the synthetic samples. We evaluate the performance of the feedback-based approach on U.S. census dataset, and show that given a predefined $K$ , our proposal outperforms standard K-Anonymity approaches on retaining the effectiveness of crowdsourcing.

Towards the Diversity of Sensitive Attributes in k-Anonymity

An Enhanced K-Anonymity Model Against Homogeneity Attack.

A New K-anonymity Algorithm towards Multiple Sensitive Attributes

Privacy Protection on Multiple Sensitive Attributes

Privacy Inference Attacking And Prevention On Multiple Relative K-Anonymized Microdata Sets

Closeness: A New Privacy Measure for Data Publishing

T-Closeness: Privacy Beyond K-Anonymity and L-Diversity

Enhanced privacy preserving K-anonymity model:(a,L)-diversity K-anonymity

Utility-based Anonymisation for Dataset with Multiple Sensitive Attributes

Microaggregation algorithm for single sensitive attribute diversely

A Complete (alpha,k)-Anonymity Model for Sensitive Values Individuation Preservation

A Personalized (a,k)-Anonymity Model

The K-Anonymization Method Satisfying Personalized Privacy Preservation

An Improved L-Diversity Model for Numerical Sensitive Attributes

Clustering-Based k-anonymity

K-Anonymity for Crowdsourcing Database

Anonymity Model Based on Expectation of Sensitive Attribute Value

Towards an Anti-inference (K, ℓ)-Anonymity Model with Value Association Rules

A Multi-Dimensional K-Anonymity Model for Hierarchical Data

(K, G)-Anonymity Model Based On Grey Relational Analysis

(α, k)-anonymity based privacy preservation by lossy join