Travel Grant Proposal for Workshop on Data Confidentiality

摘要提案号：0741571 PI: Stephen E. Fienberg机构：卡内基梅隆大学标题：数据保密研讨会旅行资助提案摘要卡内基梅隆大学将于2007年9月6日至7日举办一个关于数据保密的研讨会。越来越多的组织正在收集数据，以供研究人员使用。研究人员需要多种数据，包括：-人口普查数据-健康数据-网络数据，例如从用户访问互联网收集的数据或从路由器或其他网络服务收集的一般背景数据。基于他在统计数据库安全方面的广泛背景，PI汇集了一批令人印象深刻的专家。本次研讨会将探讨如何应用现有的统计方法对这些应用的数据进行处理，并根据需要采用适用于其他应用的新方法。在数据可以发布给研究人员之前，必须遵守数据保密政策。例如，从与人口普查局相关的已发布数据集中，不应该将特定个人或家庭与特定敏感数据项（如家庭收入）关联起来。可用的网络数据不应该将数据包及其在Internet或Web上的关联目的地与个人甚至IP地址相关联。将考虑各种技术来规范数据机密性要求和处理数据以满足要求，包括屏蔽字段和数据转换技术，以保留数据研究使用所必需的属性。研讨会将讨论的技术主题如下：-表达保密需求的语言-法律、法规和政策问题-社会和经济影响-技术的局限性，特别是面对加密方法的局限性-应用，包括网络数据、人口普查数据和其他数据库-教育和培训-所需的基础设施支持PI将编写一份关于研讨会审议的报告。拟议的讲习班将汇集代表不同学科、对数据有不同需求的政府、工业和学术组织，并将考虑不同的数据净化技术。微软和IBM将共同赞助这次研讨会。例如，微软的需求是对使用其搜索引擎和浏览器收集的数据进行净化。

AbstractProposal Number: 0741571 PI: Stephen E. Fienberg Institution: Carnegie Mellon University Title: Travel Grant Proposal for Workshop on Data Confidentiality Abstract Carnegie Mellon University will host a workshop September 6-7, 2007 on data confidentiality. Increasingly, organizations are collecting data to, among other things, be made available to researchers. Many kinds of data are needed by researchers, including: - Census data - Health data - Network data, for example collected from users' access to the Internet or general background data collected from routers or other network services. Building on his extensive background involving security for statistical databases, the PI has assembled an impressive collection of experts. This workshop will explore ways to apply existing statistical methods for sanitization of data for these applications and, as needed, new methods suitable to other applications. Before data can be released to researchers it is essential that data confidentiality policies be respected. For example, from a released data set associated with the Census Bureau, it should not be possible to associate a particular individual or household with particular sensitive data items, such as household income. Network data made available should not associate a packet, and its associated destination on the Internet or Web, with an individual or even an IP address. Various techniques will be considered for the specification of data confidentiality requirements and for sanitization of the data to meet the requirements, including masking fields and data transformation techniques that preserve properties essential for the research use of the data. The technical topics to be covered in the workshop are as follows: - Languages to express confidentiality needs - Legal, regulation and policy issues - Societal and economic impacts - Limitations of the technology, particularly in the face of the limitations of cryptographic methods - Applications, including network data, census data, other databases - Education and training - Needed infrastructure support The PI will produce a report on the workshop's deliberations. The proposed workshop will assemble Government, industry and academic organizations representing different disciplines with diverse needs for data, and will consider different techniques for data sanitization. Microsoft and IBM will be co-sponsoring the workshop. Microsoft's needs, for example, are to sanitize data gathered from use of their search engines and browsers.