In this paper, we introduce a general framework for microdata and three disclosure risk measures (minimal, maximal and weighted). We classify the attributes from a given microdata in two different ways: based on their potential identification utility and based on the order relation that exists in their domain of value. We define inversion and change factors that allow data users to quantify the magnitude of masking modification incurred for values of a key attribute. The disclosure risk measures are based on these inversion and change factors, and can be computed for any specific disclosure control method, or any combination of methods applied in succession to a given microdata. Using simulated medical data in our experiments, we show that the proposed disclosure risk measures perform as expected in real-life situations. Categories and Subject Descriptors K.4.1 [Computers and Society]: Public policy Issues – privacy, regulation. General Terms Measurement, Security. Keywords Statisti...
Traian Marius Truta, Farshad Fotouhi, Daniel C. Ba