{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T18:45:39Z","timestamp":1771699539855,"version":"3.50.1"},"reference-count":61,"publisher":"Elsevier","isbn-type":[{"value":"9781558608696","type":"print"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2002]]},"DOI":"10.1016\/b978-155860869-6\/50021-4","type":"book-chapter","created":{"date-parts":[[2007,8,9]],"date-time":"2007-08-09T11:32:10Z","timestamp":1186659130000},"page":"143-154","source":"Crossref","is-referenced-by-count":356,"title":["Hippocratic Databases"],"prefix":"10.1016","author":[{"given":"Rakesh","family":"Agrawal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jerry","family":"Kiernan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ramakrishnan","family":"Srikant","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yirong","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"issue":"4","key":"10.1016\/B978-155860869-6\/50021-4_bib1","doi-asserted-by":"crossref","first-page":"515","DOI":"10.1145\/76894.76895","article-title":"Security-control methods for statistical databases","volume":"21","author":"Adam","year":"1989","journal-title":"ACM Computing Surveys"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib2","series-title":"Privacy and human rights","author":"Banisar","year":"2000"},{"issue":"4","key":"10.1016\/B978-155860869-6\/50021-4_bib3","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1145\/604264.604268","article-title":"ADAM: A testbed for exploring the use of data mining in intrusion detection","volume":"30","author":"Barbara","year":"2001","journal-title":"SIGMOD Record"},{"issue":"3","key":"10.1016\/B978-155860869-6\/50021-4_bib4","doi-asserted-by":"crossref","first-page":"316","DOI":"10.1145\/320613.320617","article-title":"A security mechanism for statistical databases","volume":"5","author":"Beck","year":"1980","journal-title":"ACM Transactions on Database Systems"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib5","series-title":"Regulating Privacy: Data Protection and Public Policy in Europe and the United States","author":"Bennett","year":"1992"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib6","author":"Business Week","year":"2000","journal-title":"Privacy on the Net"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib7","series-title":"Database Security","author":"Castano","year":"1995"},{"issue":"6","key":"10.1016\/B978-155860869-6\/50021-4_bib8","doi-asserted-by":"crossref","first-page":"113","DOI":"10.1109\/TSE.1982.236161","article-title":"Auditing and infrence control in statistical databases","volume":"SE-8","author":"Chin","year":"1982","journal-title":"IEEE Trans. on Software Eng."},{"issue":"370","key":"10.1016\/B978-155860869-6\/50021-4_bib9","doi-asserted-by":"crossref","first-page":"377","DOI":"10.1080\/01621459.1980.10477481","article-title":"Suppression methodology and statistical disclosure control","volume":"75","author":"Cox","year":"1980","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/B978-155860869-6\/50021-4_bib10","article-title":"Beyond concern: Understanding net users' attitudes about online privacy","author":"Cranor","year":"1999","journal-title":"Technical Report TR 99.4.3, AT&T Labs-Research"},{"issue":"3","key":"10.1016\/B978-155860869-6\/50021-4_bib11","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1145\/320613.320616","article-title":"Secure statistical databases with random sample queries","volume":"5","author":"Denning","year":"1980","journal-title":"ACM Transactions on Database Systems"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib12","series-title":"Cryptography and Data Security","author":"Denning","year":"1982"},{"issue":"1","key":"10.1016\/B978-155860869-6\/50021-4_bib13","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1145\/320064.320069","article-title":"The tracker: A threat to statistical database security","volume":"4","author":"Denning","year":"1979","journal-title":"ACM Transactions on Database Systems"},{"issue":"1","key":"10.1016\/B978-155860869-6\/50021-4_bib14","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1145\/320064.320068","article-title":"Secure databases: Protection against user influence","volume":"4","author":"Dobkin","year":"1979","journal-title":"ACM Transactions on Database Systems"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib15","author":"The Economist","year":"1999","journal-title":"The End of Privacy"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib16","series-title":"Fundamentals of Database Systems","author":"Elmasri","year":"1989"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib17","author":"European Union","year":"1998","journal-title":"Directive on Privacy Protection"},{"issue":"337","key":"10.1016\/B978-155860869-6\/50021-4_bib18","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1080\/01621459.1972.10481199","article-title":"On the question of statistical confidentiality","volume":"67","author":"Fellegi","year":"1972","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/B978-155860869-6\/50021-4_bib19","series-title":"Proc. of the Int'l Conf. on Very Large Data Bases (VLDB)","first-page":"371","article-title":"Declarative data cleaning: Language, model, and algorithms","author":"Galhardas","year":"2001"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib20","series-title":"ACM Symposium on Theory of Computing","first-page":"151","article-title":"Protecting data privacy in private information retrieval schemes","author":"Gertner","year":"1998"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib21","series-title":"Proc. of the ACM SIG-MOD Conf. on Management of Data","article-title":"Executing SQL over encrypted data in the database-service-provider model","author":"Hacigumus","year":"2002"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib22","series-title":"Proc. of the Int'l Conf. on Data Engineering","article-title":"Providing database as a service","author":"Hacigumus","year":"2002"},{"issue":"2","key":"10.1016\/B978-155860869-6\/50021-4_bib23","doi-asserted-by":"crossref","first-page":"214","DOI":"10.1145\/383891.383894","article-title":"Flexible support for multiple access control policies","volume":"26","author":"Jajodia","year":"2001","journal-title":"ACM Transactions on Database Systems"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib24","series-title":"IEEE Symp. on Security and Privacy","article-title":"Polyinstantiation integrity in multilevel relations","author":"Jajodia","year":"1990"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib25","series-title":"IEEE Symposium on Security and Privacy","first-page":"300","article-title":"A novel decomposition of multilevel relations into single-level relations","author":"Jajodia","year":"1991"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib26","series-title":"2nd Workshop on Privacy Enhancing Technologies (PET 2002)","article-title":"The platform for enterprise privacy practices \u2014 privacy-enabled management of customer data","author":"Karjoth","year":"2002"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib27","series-title":"Information Hiding Techniques for Steganography and Digital Watermarking","year":"2000"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib28","series-title":"Proc. of the Eleventh Int'l World Wide Web Conference (WWW)","article-title":"The social contract core","author":"Kaufman","year":"2002"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib29","series-title":"Proc. 8th Conf. on Theoretical Aspects of Rationality and Knowledge (TARK)","article-title":"On the value of private information","author":"Kleinberg","year":"2001"},{"issue":"3","key":"10.1016\/B978-155860869-6\/50021-4_bib30","doi-asserted-by":"crossref","first-page":"247","DOI":"10.1145\/356850.356852","article-title":"Formal models of computer security","volume":"13","author":"Landwehr","year":"1981","journal-title":"ACM Computing Surveys"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib31","series-title":"A P3P Preference Exchange Language 1.0 (APPEL1.0)","year":"2001"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib32","series-title":"Code and Other Laws of Cyberspace","author":"Lessig","year":"1999"},{"issue":"3","key":"10.1016\/B978-155860869-6\/50021-4_bib33","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1145\/3979.4017","article-title":"A data distortion by probability distribution","volume":"10","author":"Liew","year":"1985","journal-title":"ACM Transactions on Database Systems"},{"issue":"4","key":"10.1016\/B978-155860869-6\/50021-4_bib34","doi-asserted-by":"crossref","first-page":"405","DOI":"10.1016\/0167-4048(93)90029-5","article-title":"A Survey of Intrusion Detection Techniques","volume":"12","author":"Lunt","year":"1993","journal-title":"Computers & Security"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib35","series-title":"The Platform for Privacy Preferences 1.0 (P3P1.0) Specification","year":"2002"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib36","article-title":"On symmetrically private information retrieval","author":"Mishra","year":"2000","journal-title":"Master's thesis, Indian Statistical Institute"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib37","author":"Office of the Information and Privacy Commissioner, Ontario","year":"1998","journal-title":"Data Mining: Staking a Claim on Your Privacy"},{"issue":"5","key":"10.1016\/B978-155860869-6\/50021-4_bib38","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1145\/253769.253802","article-title":"Internet security: Firewalls and beyond","volume":"40","author":"Oppliger","year":"1997","journal-title":"Comm. ACM"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib39","author":"Oracle Corporation","year":"2000","journal-title":"Database Encryption in Oracle8i"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib40","series-title":"Database Management Systems","author":"Ramakrishnan","year":"2000"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib41","series-title":"VLDB Journal","first-page":"381","article-title":"Potter's wheel: An interactive data cleaning system","author":"Raman","year":"2001"},{"issue":"1","key":"10.1016\/B978-155860869-6\/50021-4_bib42","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1145\/348.349","article-title":"Practical data-swapping: The first steps","volume":"9","author":"Reiss","year":"1984","journal-title":"ACM Transactions on Database Systems"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib43","series-title":"The Privacy Law Sourcebook 2000: United States Law, International Law, and Recent Developments","author":"Rotenberg","year":"2000"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib44","article-title":"Fair information practices and the architecture of privacy","volume":"1","author":"Rotenberg","year":"2001","journal-title":"Stanford Technology Law Review"},{"issue":"9","key":"10.1016\/B978-155860869-6\/50021-4_bib45","doi-asserted-by":"crossref","first-page":"34","DOI":"10.1109\/2.708448","article-title":"A survey of the world wide web security","volume":"31","author":"Rubin","year":"1998","journal-title":"IEEE Computer"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib46","series-title":"Applied Cryptography","author":"Schneier","year":"1996"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib47","series-title":"Proc. of the Eighth Int'l Conference on Very Large Databases","first-page":"208","article-title":"Statistical databases: Characteristics, problems and some solutions","author":"Shoshani","year":"1982"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib48","series-title":"Database Systems Concepts","author":"Silberschatz","year":"1997"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib49","series-title":"IEEE Symp. on Security and Privacy","article-title":"Practical techniques for searches on encrypted data","author":"Song","year":"2000"},{"issue":"2","key":"10.1016\/B978-155860869-6\/50021-4_bib50","doi-asserted-by":"crossref","first-page":"190","DOI":"10.1109\/69.54719","article-title":"Design of LDV: A multilevel secure relational database management system","volume":"2","author":"Stachour","year":"1990","journal-title":"IEEE Trans. Knowledge and Data Eng."},{"key":"10.1016\/B978-155860869-6\/50021-4_bib51","author":"Time","year":"1997","journal-title":"The Death of Privacy"},{"issue":"4","key":"10.1016\/B978-155860869-6\/50021-4_bib52","doi-asserted-by":"crossref","first-page":"672","DOI":"10.1145\/1994.383392","article-title":"The statistical security of a statistical database","volume":"9","author":"Traub","year":"1984","journal-title":"ACM Transactions on Database Systems"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib53","volume":"volume 1","author":"Ullman","year":"1988"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib54","article-title":"Principles of Database & Knowledge-Base Systems, volume 1. The New Technologies","author":"Ullman","year":"1989"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib55","series-title":"Records, computers and the Rights of Citizen: Report of the Secretary's Advisory Committee on Automated Personal Data Systems","author":"U.S. Department of Health, Education, and Welfare","year":"1973"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib56","series-title":"IEEE Symp. on Security and Privacy","first-page":"18","article-title":"Fingerprinting","author":"Wagner","year":"1983"},{"issue":"309","key":"10.1016\/B978-155860869-6\/50021-4_bib57","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1080\/01621459.1965.10480775","article-title":"Randomized response: A survey technique for eliminating evasive answer bias","volume":"60","author":"Warner","year":"1965","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/B978-155860869-6\/50021-4_bib58","article-title":"E-commerce and privacy: What net users want","author":"Westin","year":"1998"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib59","article-title":"Privacy concerns & consumer choice","author":"Westin","year":"1998"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib60","article-title":"Freebies and privacy: What net users think","author":"Westin","year":"1999","journal-title":"Technical report, Opinion Research Corporation"},{"key":"10.1016\/B978-155860869-6\/50021-4_bib61","series-title":"Proc. of the ACM SIGMOD Conf. on Management of Data","first-page":"169","article-title":"A study on the protection of statistical databases","author":"Yu","year":"1977"}],"container-title":["VLDB '02: Proceedings of the 28th International Conference on Very Large Databases"],"original-title":[],"language":"en","deposited":{"date-parts":[[2019,1,5]],"date-time":"2019-01-05T08:00:14Z","timestamp":1546675214000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/B9781558608696500214"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2002]]},"ISBN":["9781558608696"],"references-count":61,"URL":"https:\/\/doi.org\/10.1016\/b978-155860869-6\/50021-4","relation":{},"subject":[],"published":{"date-parts":[[2002]]}}}