Abstract:Privacy is often considered as a social, moral or legal concept. As Internet and e-commerce have prospered nowadays, privacy has become one of the most important issues in IT and has received increasing attention from enterprises, consumers and legislators. Although various techniques, such as randomization-based methods, cryptographic-based methods, and database inference control etc. have been developed, many key problems still remain open in this area. Especially, new privacy and security issues have been identified, and the scope of the privacy has been expanded. An essential problem under the context is tradeoffs between the data utility and the disclosure risk. Since previous research only conducted empirical evaluations or limited analysis for existing randomization techniques, a more solid theoretical analysis is needed. This dissertation investigates different perturbation models in randomization-based privacy preserving data mining. Among them, the additive-noise-based model and the projection-based-model are primary tools. For the additive-noise-based perturbation, the explicit relation between noise and mining accuracy has not been carefully studied. We first propose an improved strategy to reconstruct the data based on the representative method. Then we develop explicit bounds of reconstruction error. Both the upper bound and the lower bound provide a guideline to balance the privacy/accuracy tradeoff. We also discuss other potential threats to the privacy based on our defined measure for quantifying the privacy. For the projection-based perturbation, properties of different models and possible disclosures within those models are analyzed in detail. Particularly, we propose an A-priori Knowledge-based ICA attack (AK-ICA) which is effective against all the existing projection models. Due to the vulnerabilities in previous randomization models, a general-location-model-based approach is proposed. It first builds a statistical model to fit the real data with both categorical and numerical types of variables, then generates a synthetic data set for mining by tuning parameters of the model instead of perturbing particular individual values. Since the search space of parameters of the model is much smaller than that of data and all information which attackers can derive is contained in those parameters, this approach is expected to be more effective and efficient. This dissertation investigates privacy issues of the numerical data in this model, wherein the disclosure is analyzed and controlled in different scenarios.

Privacy-Accuracy Trade-Off in Distributed Data Mining

Privacy-Accuracy Trade-Off in Differentially-Private Distributed Classification: A Game Theoretical Approach

Privacy Preserving Distributed Classification: A Satisfaction Equilibrium Approach

PEM: A Practical Differentially Private System for Large-Scale Cross-Institutional Data Mining.

An Adaptive Privacy Preserving Data Mining Model under Distributed Environment

InPrivate Digging: Enabling Tree-based Distributed Data Mining with Differential Privacy

A New Hybrid Approach for Privacy Preserving Distributed Data Mining

Distributed Anonymous Data Perturbation Method for Privacy-Preserving Data Mining

Analysis of and techniques for privacy preserving data mining

Privacy-Preserving Distributed Optimization and Learning

Differentially Private Nash Equilibrium Seeking in Quadratic Network Games

Information Security in Big Data: Privacy and Data Mining

Two-Party Privacy Games: How Users Perturb When Learners Preempt

Privacy-preserving algorithms for distributed mining of frequent itemsets

Quantum Privacy-Preserving Data Mining

Improving Data Utility Through Game Theory in Personalized Differential Privacy.

The Conflict Between Big Data and Individual Privacy

Differential Privacy-preserving Distributed Machine Learning

A Distributed Privacy-Preserving Learning Dynamics in General Social Networks

A Privacy-Preserving Classification Mining Algorithm