{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,5]],"date-time":"2025-10-05T04:21:33Z","timestamp":1759638093259,"version":"3.41.0"},"reference-count":50,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2015,6,1]],"date-time":"2015-06-01T00:00:00Z","timestamp":1433116800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF","award":["1054389"],"award-info":[{"award-number":["1054389"]}]},{"name":"National Science Foundation","award":["1228669"],"award-info":[{"award-number":["1228669"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Knowl. Discov. Data"],"published-print":{"date-parts":[[2015,6]]},"abstract":"<jats:p>\n            In statistical privacy,\n            <jats:italic>utility<\/jats:italic>\n            refers to two concepts:\n            <jats:italic>information preservation,<\/jats:italic>\n            how much statistical information is retained by a sanitizing algorithm, and\n            <jats:italic>usability,<\/jats:italic>\n            how (and with how much difficulty) one extracts this information to build statistical models, answer queries, and so forth. Some scenarios incentivize a separation between information preservation and usability, so that the data owner first chooses a sanitizing algorithm to maximize a measure of information preservation, and, afterward, the data consumers process the sanitized output according to their various individual needs [Ghosh et al. 2009; Williams and McSherry 2010].\n          <\/jats:p>\n          <jats:p>We analyze the information-preserving properties of utility measures with a combination of two new and three existing utility axioms and study how violations of an axiom can be fixed. We show that the average (over possible outputs of the sanitizer) error of Bayesian decision makers forms the unique class of utility measures that satisfy all of the axioms. The axioms are agnostic to Bayesian concepts such as subjective probabilities and hence strengthen support for Bayesian views in privacy research. In particular, this result connects information preservation to aspects of usability\u2014if the information preservation of a sanitizing algorithm should be measured as the average error of a Bayesian decision maker, shouldn\u2019t Bayesian decision theory be a good choice when it comes to using the sanitized outputs for various purposes? We put this idea to the test in the unattributed histogram problem where our decision-theoretic postprocessing algorithm empirically outperforms previously proposed approaches.<\/jats:p>","DOI":"10.1145\/2700407","type":"journal-article","created":{"date-parts":[[2015,6,2]],"date-time":"2015-06-02T15:13:25Z","timestamp":1433258005000},"page":"1-29","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Information Measures in Statistical Privacy and Data Processing Applications"],"prefix":"10.1145","volume":"9","author":[{"given":"Bing-Rong","family":"Lin","sequence":"first","affiliation":[{"name":"Penn State University, PA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Kifer","sequence":"additional","affiliation":[{"name":"Penn State University, PA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2015,6]]},"reference":[{"unstructured":"John M. Abowd and Simon D. Woodcock. 2001. Disclosure limitation in longitudinal linked data. Confidentiality Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies (2001) 215--277.  John M. Abowd and Simon D. Woodcock. 2001. Disclosure limitation in longitudinal linked data. Confidentiality Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies (2001) 215--277.","key":"e_1_2_2_1_1"},{"doi-asserted-by":"publisher","key":"e_1_2_2_2_1","DOI":"10.1109\/ICDE.2008.4497447"},{"doi-asserted-by":"publisher","key":"e_1_2_2_3_1","DOI":"10.1007\/978-3-642-29420-4_3"},{"doi-asserted-by":"crossref","unstructured":"M\u00e1rio S. Alvim Miguel E. Andr\u00e9s Konstantinos Chatzikokolakis and Catuscia Palamidessi. 2011a. On the relation between differential privacy and quantitative information flow. In ICALP.   M\u00e1rio S. Alvim Miguel E. Andr\u00e9s Konstantinos Chatzikokolakis and Catuscia Palamidessi. 2011a. On the relation between differential privacy and quantitative information flow. In ICALP.","key":"e_1_2_2_4_1","DOI":"10.1007\/978-3-642-22012-8_4"},{"doi-asserted-by":"publisher","key":"e_1_2_2_5_1","DOI":"10.1109\/CSF.2012.26"},{"doi-asserted-by":"publisher","key":"e_1_2_2_6_1","DOI":"10.1145\/2133601.2133637"},{"doi-asserted-by":"publisher","key":"e_1_2_2_7_1","DOI":"10.1145\/1265530.1265569"},{"unstructured":"Richard E. Barlow D. J. Bartholomew J. M. Bremner and H. D. Brunk. 1972. Statistical Inference Under Order Restrictions. John Wiley and Sons.  Richard E. Barlow D. J. Bartholomew J. M. Bremner and H. D. Brunk. 1972. Statistical Inference Under Order Restrictions. John Wiley and Sons.","key":"e_1_2_2_8_1"},{"unstructured":"Christopher M. Bishop. 2006. Pattern Recognition and Machine Learning. Springer.   Christopher M. Bishop. 2006. Pattern Recognition and Machine Learning. Springer.","key":"e_1_2_2_9_1"},{"doi-asserted-by":"publisher","key":"e_1_2_2_10_1","DOI":"10.1145\/1065167.1065184"},{"doi-asserted-by":"publisher","key":"e_1_2_2_11_1","DOI":"10.1145\/1374376.1374464"},{"doi-asserted-by":"publisher","key":"e_1_2_2_12_1","DOI":"10.1109\/FOCS.2010.13"},{"doi-asserted-by":"publisher","key":"e_1_2_2_13_1","DOI":"10.1561\/1900000008"},{"doi-asserted-by":"crossref","unstructured":"Thomas M. Cover and Joy A. Thomas. 1991. Elements of Information Theory. Wiley-Interscience.   Thomas M. Cover and Joy A. Thomas. 1991. Elements of Information Theory. Wiley-Interscience.","key":"e_1_2_2_14_1","DOI":"10.1002\/0471200611"},{"doi-asserted-by":"publisher","key":"e_1_2_2_15_1","DOI":"10.1145\/1989323.1989347"},{"doi-asserted-by":"publisher","key":"e_1_2_2_16_1","DOI":"10.1145\/773153.773173"},{"doi-asserted-by":"publisher","key":"e_1_2_2_17_1","DOI":"10.1007\/11681878_14"},{"doi-asserted-by":"publisher","key":"e_1_2_2_18_1","DOI":"10.1145\/1536414.1536467"},{"doi-asserted-by":"crossref","unstructured":"Bruce Ebanks Prasanna Sahoo and Wolfgang Sander. 1997. Characterizations of Information Measures. World Scientific Publishing Co.  Bruce Ebanks Prasanna Sahoo and Wolfgang Sander. 1997. Characterizations of Information Measures. World Scientific Publishing Co.","key":"e_1_2_2_19_1","DOI":"10.1142\/3354"},{"doi-asserted-by":"publisher","key":"e_1_2_2_20_1","DOI":"10.1145\/775047.775080"},{"doi-asserted-by":"crossref","unstructured":"Andrew Gelman John B. Carlin Hal S. Stern and Donald B. Rubin. 2003. Bayesian Data Analysis (2nd ed.). Chapman &amp; Hall\/CRC.  Andrew Gelman John B. Carlin Hal S. Stern and Donald B. Rubin. 2003. Bayesian Data Analysis (2nd ed.). Chapman &amp; Hall\/CRC.","key":"e_1_2_2_21_1","DOI":"10.1201\/9780429258480"},{"doi-asserted-by":"publisher","key":"e_1_2_2_22_1","DOI":"10.1145\/1993574.1993605"},{"doi-asserted-by":"publisher","key":"e_1_2_2_23_1","DOI":"10.1145\/1536414.1536464"},{"doi-asserted-by":"publisher","key":"e_1_2_2_24_1","DOI":"10.1145\/1807085.1807105"},{"doi-asserted-by":"publisher","key":"e_1_2_2_25_1","DOI":"10.1145\/1806689.1806786"},{"doi-asserted-by":"publisher","key":"e_1_2_2_26_1","DOI":"10.14778\/1920841.1920970"},{"doi-asserted-by":"publisher","key":"e_1_2_2_27_1","DOI":"10.1109\/ICDE.2009.19"},{"doi-asserted-by":"publisher","key":"e_1_2_2_28_1","DOI":"10.1145\/775047.775089"},{"doi-asserted-by":"publisher","key":"e_1_2_2_29_1","DOI":"10.1145\/1807085.1807106"},{"doi-asserted-by":"publisher","key":"e_1_2_2_30_1","DOI":"10.29012\/jpc.v4i1.610"},{"doi-asserted-by":"publisher","key":"e_1_2_2_31_1","DOI":"10.1145\/1807085.1807104"},{"doi-asserted-by":"publisher","key":"e_1_2_2_32_1","DOI":"10.1145\/2448496.2448502"},{"doi-asserted-by":"publisher","key":"e_1_2_2_33_1","DOI":"10.1145\/2463676.2463721"},{"key":"e_1_2_2_34_1","first-page":"407","article-title":"Statistical analysis of masked data","volume":"9","author":"Little Roderick J. A.","year":"1993","journal-title":"Journal of Official Statistics"},{"doi-asserted-by":"crossref","unstructured":"Annabelle McIver Carroll Morgan Geoffrey Smith Barbara Espinoza and Larissa Meinicke. 2014. Abstract channels and their robust information-leakage ordering. In POST.  Annabelle McIver Carroll Morgan Geoffrey Smith Barbara Espinoza and Larissa Meinicke. 2014. Abstract channels and their robust information-leakage ordering. In POST.","key":"e_1_2_2_35_1","DOI":"10.1007\/978-3-642-54792-8_5"},{"doi-asserted-by":"publisher","key":"e_1_2_2_36_1","DOI":"10.1109\/FOCS.2007.41"},{"doi-asserted-by":"crossref","unstructured":"J. B. Paris. 1994. The Uncertain Reasoner\u2019s Companion. Cambridge University Press.   J. B. Paris. 1994. The Uncertain Reasoner\u2019s Companion. Cambridge University Press.","key":"e_1_2_2_38_1","DOI":"10.1017\/CBO9780511526596"},{"doi-asserted-by":"publisher","key":"e_1_2_2_39_1","DOI":"10.1145\/2342549.2342553"},{"key":"e_1_2_2_40_1","first-page":"1","article-title":"Multiple imputation for statistical disclosure limitation","volume":"19","author":"Raghunathan T. E.","year":"2003","journal-title":"Journal of Official Statistics"},{"unstructured":"Vibhor Rastogi Dan Suciu and Sungho Hong. 2007. The boundary between privacy and utility in data publishing. In VLDB.   Vibhor Rastogi Dan Suciu and Sungho Hong. 2007. The boundary between privacy and utility in data publishing. In VLDB.","key":"e_1_2_2_41_1"},{"key":"e_1_2_2_42_1","first-page":"441","article-title":"Using CART to generate partially synthetic public use microdata","volume":"21","author":"Reiter Jerome P.","year":"2005","journal-title":"Journal of Official Statistics"},{"doi-asserted-by":"publisher","key":"e_1_2_2_43_1","DOI":"10.1214\/aoms\/1177698335"},{"doi-asserted-by":"publisher","key":"e_1_2_2_44_1","DOI":"10.1214\/aos\/1176345014"},{"unstructured":"Leonard J. Savage. 1972. The Foundations of Statistics. Dover.  Leonard J. Savage. 1972. The Foundations of Statistics. Dover.","key":"e_1_2_2_45_1"},{"doi-asserted-by":"publisher","key":"e_1_2_2_46_1","DOI":"10.2140\/pjm.1958.8.171"},{"unstructured":"John von Neumann and Oskar Morgenstern. 2007. Theory of Games and Economic Behavior. Princeton University Press.  John von Neumann and Oskar Morgenstern. 2007. Theory of Games and Economic Behavior. Princeton University Press.","key":"e_1_2_2_47_1"},{"unstructured":"Oliver Williams and Frank McSherry. 2010. Probabilistic inference and differential privacy. In NIPS.  Oliver Williams and Frank McSherry. 2010. Probabilistic inference and differential privacy. In NIPS.","key":"e_1_2_2_48_1"},{"unstructured":"Raymond Wong Ada Fu Ke Wang and Jian Pei. 2007. Minimality attack in privacy preserving data publishing. In VLDB.   Raymond Wong Ada Fu Ke Wang and Jian Pei. 2007. Minimality attack in privacy preserving data publishing. In VLDB.","key":"e_1_2_2_49_1"},{"volume-title":"Anatomy: Simple and effective privacy preservation. In VLDB.","year":"2006","author":"Xiao Xiaokui","key":"e_1_2_2_50_1"},{"doi-asserted-by":"crossref","unstructured":"Qing Zhang Nick Koudas Divesh Srivastava and Ting Yu. 2007. Aggregate query answering on anonymized tables. In ICDE.  Qing Zhang Nick Koudas Divesh Srivastava and Ting Yu. 2007. Aggregate query answering on anonymized tables. In ICDE.","key":"e_1_2_2_51_1","DOI":"10.1109\/ICDE.2007.367857"}],"container-title":["ACM Transactions on Knowledge Discovery from Data"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2700407","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2700407","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:07:44Z","timestamp":1750223264000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2700407"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,6]]},"references-count":50,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2015,6]]}},"alternative-id":["10.1145\/2700407"],"URL":"https:\/\/doi.org\/10.1145\/2700407","relation":{},"ISSN":["1556-4681","1556-472X"],"issn-type":[{"type":"print","value":"1556-4681"},{"type":"electronic","value":"1556-472X"}],"subject":[],"published":{"date-parts":[[2015,6]]},"assertion":[{"value":"2014-03-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2014-11-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-06-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}