Abstract:Data sharing in today's information society poses a threat to individual privacy and organisational confidentiality. k-anonymity is a widely adopted model to prevent the owner of a record being re-identified. By generalising and/or suppressing certain portions of the released dataset, it guarantees that no records can be uniquely distinguished from at least other k-1 records. A key requirement for the k-anonymity problem is to minimise the information loss resulting from data modifications. This article proposes a top-down approach to solve this problem. It first considers each record as a vertex and the similarity between two records as the edge weight to construct a complete weighted graph. Then, an edge cutting algorithm is designed to divide the complete graph into multiple trees/components. The Large Components with size bigger than 2k-1 are subsequently split to guarantee that each resulting component has the vertex number between k and 2k-1. Finally, the generalisation operation is applied on the vertices in each component (i.e. equivalence class) to make sure all the records inside have identical quasi-identifier values. We prove that the proposed approach has polynomial running time and theoretical performance guarantee O(k). The empirical experiments show that our approach results in substantial improvements over the baseline heuristic algorithms, as well as the bottom-up approach with the same approximate bound O(k). Comparing to the baseline bottom-up O(logk)-approximation algorithm, when the required k is smaller than 50, the adopted top-down strategy makes our approach achieve similar performance in terms of information loss while spending much less computing time. It demonstrates that our approach would be a best choice for the k-anonymity problem when both the data utility and runtime need to be considered, especially when k is set to certain value smaller than 50 and the record set is big enough to make the runtime have to be taken into account.

Practical<mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML" id="M1"><mml:mrow><mml:mi>m</mml:mi></mml:mrow></mml:math>-<mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML" id="M2"><mml:mrow><mml:mi>k</mml:mi></mml:mrow></mml:math>-Anonymization for Collaborative Data Publishing without Tru

Practical M-K-anonymization for Collaborative Data Publishing Without Trusted Third Party

An Enhanced K-Anonymity Model Against Homogeneity Attack.

K-Anonymity for Crowdsourcing Database

A secure distributed framework for achieving k-anonymity

k-Anonymous data collection

On Distributed K-Anonymization.

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Privacy-enhancing K -Anonymization of Customer Data

MuCo: Publishing Microdata with Privacy Preservation through Mutual Cover

A Top-Down Approach For Approximate Data Anonymisation

An algorithm for collusion-resistant anonymization and fingerprinting of sensitive microdata

T-Closeness Slicing: A New Privacy-Preserving Approach for Transactional Data Publishing.

Collusion-Tolerable Privacy-Preserving Sum and Product Calculation without Secure Channel

Anonymity-preserving data collection.

Privacy Inference Attacking And Prevention On Multiple Relative K-Anonymized Microdata Sets

(α, k)-anonymity based privacy preservation by lossy join

k-automorphism: a general framework for privacy preserving network publication

Clustering-Based k-anonymity

Hamburger Attack: A Collusion Attack Against Privacy-Preserving Data Aggregation Schemes

(K,p)-Anonymity