{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,30]],"date-time":"2025-10-30T22:26:07Z","timestamp":1761863167292},"reference-count":51,"publisher":"Oxford University Press (OUP)","issue":"1","content-domain":{"domain":["bmj.com"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,1]]},"DOI":"10.1136\/amiajnl-2012-001047","type":"journal-article","created":{"date-parts":[[2012,12,14]],"date-time":"2012-12-14T13:28:48Z","timestamp":1355491728000},"page":"102-108","update-policy":"http:\/\/dx.doi.org\/10.1136\/crossmarkpolicy","source":"Crossref","is-referenced-by-count":32,"title":["Toward practicing privacy"],"prefix":"10.1093","volume":"20","author":[{"given":"Cynthia","family":"Dwork","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rebecca","family":"Pottenger","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2013,1]]},"reference":[{"key":"key\n\t\t\t\t20170522083952_b1","doi-asserted-by":"crossref","first-page":"557","DOI":"10.1142\/S0218488502001648","article-title":"k-anonymity: a model for protecting privacy","volume":"10","author":"Sweeney","year":"2002","journal-title":"Int\u2019l J Uncertainty, Fuzziness and Knowledge-based Systems"},{"key":"key\n\t\t\t\t20170522083952_b2","volume-title":"A face is exposed for AOL searcher no. 441779, 8\/9\/2006","author":"Barbaro"},{"key":"key\n\t\t\t\t20170522083952_b3","article-title":"Robust de-anonymization of large sparse datasets (how to break anonymity of the Netflix Prize dataset)","author":"Narayanan","year":"2008"},{"key":"key\n\t\t\t\t20170522083952_b4","doi-asserted-by":"crossref","first-page":"e1000167","DOI":"10.1371\/journal.pgen.1000167","article-title":"Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays","volume":"4","author":"Homer","year":"2008","journal-title":"PLoS Genet"},{"key":"key\n\t\t\t\t20170522083952_b5","article-title":"Public access to genome-wide data: Five views on balancing research with privacy and protection","volume":"5","author":"Consortium","year":"2009","journal-title":"PLoS Genet"},{"key":"key\n\t\t\t\t20170522083952_b6","first-page":"265","article-title":"Composition attacks and auxiliary information in data privacy","author":"Ganta","year":"2008"},{"key":"key\n\t\t\t\t20170522083952_b7","first-page":"202","article-title":"Revealing information while preserving privacy","author":"Dinur","year":"2003"},{"key":"key\n\t\t\t\t20170522083952_b8","first-page":"321","article-title":"Lower bounds in differential privacy","volume-title":"TCC, volume 7194 of lecture notes in computer science","author":"De","year":"2012"},{"key":"key\n\t\t\t\t20170522083952_b9","first-page":"85","article-title":"The price of privacy and the limits of lp decoding","author":"Dwork","year":"2007"},{"key":"key\n\t\t\t\t20170522083952_b10","doi-asserted-by":"crossref","first-page":"281","DOI":"10.1137\/0217017","article-title":"A digital signature scheme secure against adaptive chosen-message attacks","volume":"17","author":"Goldwasser","year":"1988","journal-title":"SIAM J Comput"},{"key":"key\n\t\t\t\t20170522083952_b11","first-page":"270","article-title":"Probabilistic encryption","volume":"28","author":"Goldwasser","year":"1984","journal-title":"JCSS"},{"key":"key\n\t\t\t\t20170522083952_b12","first-page":"429","article-title":"Towards a methodology for statistical disclosure control","volume":"15","author":"Dalenius","year":"1977","journal-title":"Statistik Tidskrift"},{"key":"key\n\t\t\t\t20170522083952_b13","author":"Dwork","year":"2008","journal-title":"On the difficulties of disclosure prevention in statistical databases or the case for differential privacy"},{"key":"key\n\t\t\t\t20170522083952_b14","first-page":"1","article-title":"Differential privacy","author":"Dwork","year":"2006"},{"key":"key\n\t\t\t\t20170522083952_b15","first-page":"265","article-title":"Calibrating noise to sensitivity in private data analysis","author":"Dwork","year":"2006"},{"key":"key\n\t\t\t\t20170522083952_b16","doi-asserted-by":"crossref","DOI":"10.1145\/375551.375602","article-title":"On the design and quantification of privacy preserving data mining algorithms","author":"Agrawal","year":"2001"},{"key":"key\n\t\t\t\t20170522083952_b17","first-page":"51","article-title":"Boosting and Differential Privacy","author":"Dwork","year":"2010"},{"key":"key\n\t\t\t\t20170522083952_b18","first-page":"371","article-title":"Differential privacy and robust statistics","author":"Dwork","year":"2009"},{"key":"key\n\t\t\t\t20170522083952_b19","first-page":"813","article-title":"Privacy-preserving statistical estimation with optimal convergence rates","author":"Smith","year":"2011"},{"key":"key\n\t\t\t\t20170522083952_b20","first-page":"273","article-title":"Privacy, accuracy, and consistency too: A holistic solution to contingency table release","author":"Barak","year":"2007"},{"key":"key\n\t\t\t\t20170522083952_b21","first-page":"1069","article-title":"Differentially private empirical risk minimization","volume":"12","author":"Chaudhuri","year":"2011","journal-title":"JMLR"},{"key":"key\n\t\t\t\t20170522083952_b22","author":"Hardt","journal-title":"A simple and practical algorithm for differentially private data release, 2010"},{"key":"key\n\t\t\t\t20170522083952_b23","article-title":"Manuscript in preparation","author":"Pottenger","year":"2012"},{"key":"key\n\t\t\t\t20170522083952_b24","unstructured":"http:\/\/ori.dhhs.gov\/education\/products\/ucla\/chapter2\/page04b.htm."},{"key":"key\n\t\t\t\t20170522083952_b25","first-page":"149","article-title":"On the security of noise addition for privacy in statistical databases","author":"Castell\u00e0-Roca","year":"2004"},{"key":"key\n\t\t\t\t20170522083952_b26","first-page":"99","article-title":"On the privacy preserving properties of random data perturbation techniques","author":"Datta","year":"2003"},{"key":"key\n\t\t\t\t20170522083952_b27","article-title":"Private communication with the first author","author":"Manber","year":"2003(?)"},{"key":"key\n\t\t\t\t20170522083952_b28","article-title":"Work in progress","author":"Dwork"},{"key":"key\n\t\t\t\t20170522083952_b29","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1080\/01621459.1965.10480775","article-title":"Randomized response: a survey technique for eliminating evasive answer bias","volume":"60","author":"Warner","year":"1965","journal-title":"JASA"},{"key":"key\n\t\t\t\t20170522083952_b30","doi-asserted-by":"crossref","DOI":"10.1145\/1374376.1374464","article-title":"A learning theory approach to non-interactive database privacy","author":"Blum","year":"2008"},{"key":"key\n\t\t\t\t20170522083952_b31","first-page":"381","article-title":"On the complexity of differentially private data release: efficient algorithms and hardness results","volume-title":"Proceedings of the 43rrd ACM Symposium on Theory of Computing,","author":"Dwork","year":"2009"},{"key":"key\n\t\t\t\t20170522083952_b32","first-page":"803","article-title":"Privately releasing conjunctions and the statistical query barrier","volume-title":"Proceedings of the 43rrd ACM Symposium on Theory of Computing,","author":"Gupta","year":"2011"},{"key":"key\n\t\t\t\t20170522083952_b33","first-page":"61","article-title":"A multiplicative weights mechanism for interactive privacy-preserving data analysis","author":"Hardt","year":"2010"},{"key":"key\n\t\t\t\t20170522083952_b34","first-page":"168","article-title":"Private data release via learning thresholds","author":"Hardt","year":"2012"},{"key":"key\n\t\t\t\t20170522083952_b35","first-page":"765","article-title":"The median mechanism: interactive and efficient privacy with multiple queries","author":"Roth","year":"2010"},{"key":"key\n\t\t\t\t20170522083952_b36","first-page":"66","article-title":"Pan-private streaming algorithms","author":"Dwork","year":"2010"},{"key":"key\n\t\t\t\t20170522083952_b37","first-page":"528","article-title":"Privacy-preserving datamining on vertically partitioned databases","author":"Dwork","year":"2004"},{"key":"key\n\t\t\t\t20170522083952_b38","first-page":"128","article-title":"Practical privacy: The SuLQ framework","author":"Blum","year":"2005"},{"key":"key\n\t\t\t\t20170522083952_b39","first-page":"19","article-title":"Privacy integrated queries (codebase)","author":"McSherry","year":"2009","journal-title":"Proceedings of ACM SIGMOD Conference on Management of Data"},{"key":"key\n\t\t\t\t20170522083952_b40","article-title":"Airavat: Security and privacy for mapreduce","author":"Roy","year":"2010"},{"key":"key\n\t\t\t\t20170522083952_b41","first-page":"94","article-title":"Mechanism design via differential privacy","author":"McSherry","year":"2007"},{"key":"key\n\t\t\t\t20170522083952_b42","first-page":"75","article-title":"Smooth sensitivity and sampling in private data analysis","author":"Nissim","year":"2007"},{"key":"key\n\t\t\t\t20170522083952_b43","first-page":"439","article-title":"Privacy-preserving data mining","volume-title":"Proceedings of ACM SIGMOD Conference on Management of Data","author":"Agrawal","year":"2000"},{"key":"key\n\t\t\t\t20170522083952_b44","first-page":"1","article-title":"Chosen ciphertext attacks against protocols based on the rsa encryption standard pkcs #1","author":"Bleichenbacher","year":"1998"},{"key":"key\n\t\t\t\t20170522083952_b45","first-page":"70","article-title":"The cost of privacy: destruction of data-mining utility in anonymized data publishing","author":"Brickell","year":"2008"},{"key":"key\n\t\t\t\t20170522083952_b46","doi-asserted-by":"crossref","DOI":"10.1145\/103418.103474","article-title":"Non-malleable cryptography","author":"Dolev","year":"1991"},{"key":"key\n\t\t\t\t20170522083952_b47","doi-asserted-by":"crossref","first-page":"391","DOI":"10.1137\/S0097539795291562","article-title":"Non-malleable cryptography","volume":"30","author":"Dolev","year":"2000","journal-title":"Siam J on Comput"},{"key":"key\n\t\t\t\t20170522083952_b48","doi-asserted-by":"crossref","DOI":"10.29012\/jpc.v3i1.594","article-title":"Privacy violations using microtargeted ads: a case study","volume":"3","author":"Korolova","year":"2011","journal-title":"J Privacy and Confidentiality"},{"key":"key\n\t\t\t\t20170522083952_b49","article-title":"Private communication","author":"Liskov","year":"2007"},{"key":"key\n\t\t\t\t20170522083952_b50","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1145\/1743546.1743558","article-title":"Myths and fallacies of \"personally identifiable information\"","volume":"53","author":"Narayanan","year":"2010","journal-title":"Communications of the ACM"},{"key":"key\n\t\t\t\t20170522083952_b51","doi-asserted-by":"crossref","first-page":"2718","DOI":"10.1109\/ISIT.2009.5205863","article-title":"Differential privacy with compression","volume-title":"Proceedings of the 2009 IEEE International Symposium on Information Theory","author":"Zhou","year":"2009"}],"container-title":["Journal of the American Medical Informatics Association"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/jamia\/article-pdf\/20\/1\/102\/17374316\/20-1-102.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,7]],"date-time":"2019-07-07T02:45:53Z","timestamp":1562467553000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/jamia\/article-lookup\/doi\/10.1136\/amiajnl-2012-001047"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,1]]},"references-count":51,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2013,1]]},"published-print":{"date-parts":[[2013,1]]}},"URL":"https:\/\/doi.org\/10.1136\/amiajnl-2012-001047","relation":{},"ISSN":["1527-974X","1067-5027"],"issn-type":[{"value":"1527-974X","type":"electronic"},{"value":"1067-5027","type":"print"}],"subject":[],"published":{"date-parts":[[2013,1]]}}}