SECURITY PROBLEMS ON INFERENCE CONTROL FOR SUM, MAX, AND MIN QUERIES.

Abstract

The basic inference problem is defined as follows: For a finite set X equals left brace x//1,. . . ,x//n right brace , we wish to infer properties of elements of X on the basis of sets of 'queries' regarding subsets of X. By restricting these queries to statistical queries, the statistical database (SDB) security problem is obtained. The security problem for the SDB is to limit the use of the SDB so that only statistical information is available and no sequence of queries is sufficient to infer protected information about any individual. When such information is obtained the SDB is said to be compromised. In this paper, two applications concerning the security of the SDB are considered: (1) On-line application. The queries are answered one by one in sequence and it is necessary to determine whether the SDB is compromised if a new query is answered. (2) Off-line application. All queries are available at the same time and it is necessary to determine the maximum subset of queries to be answered without compromising the SDB.