2007/05/19 by David Martín, Daniel Kifer, Martin, David J. +7 · 1 citation
Computer Science · Social Sciences · #Access Control and Trust #Cryptography and Data Security #Databases (cs.DB) #FOS: Computer and information sciences #Privacy-Preserving Technologies in Data
paper · pdf · doi:10.48550/arxiv.0705.2787
openalex publication_date 2007/05/19 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Recent work has shown the necessity of considering an attacker's background knowledge when reasoning about privacy in data publishing. However, in practice, the data publisher does not know what background knowledge the attacker possesses. Thus, it is important to consider the worst-case. In this paper, we initiate a formal study of worst-case background knowledge. We propose a language that can express any background knowledge about the data. We provide a polynomial time algorithm to measure the amount of disclosure of sensitive information in the worst case, given that the attacker has at most a specified number of pieces of information in this language. We also provide a method to efficiently sanitize the data so that the amount of disclosure in the worst case is less than a specified threshold.