{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T03:43:53Z","timestamp":1760240633787,"version":"build-2065373602"},"reference-count":26,"publisher":"MDPI AG","issue":"8","license":[{"start":{"date-parts":[[2019,8,11]],"date-time":"2019-08-11T00:00:00Z","timestamp":1565481600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Algorithms"],"abstract":"<jats:p>The objective of the cell suppression problem (CSP) is to protect sensitive cell values in tabular data under the presence of linear relations concerning marginal sums. Previous algorithms for solving CSPs ensure that every sensitive cell has enough uncertainty on its values based on the interval width of all possible values. However, we find that every deterministic CSP algorithm is vulnerable to an adversary who possesses the knowledge of that algorithm. We devise a matching attack scheme that narrows down the ranges of sensitive cell values by matching the suppression pattern of an original table with that of each candidate table. Our experiments show that actual ranges of sensitive cell values are significantly narrower than those assumed by the previous CSP algorithms.<\/jats:p>","DOI":"10.3390\/a12080165","type":"journal-article","created":{"date-parts":[[2019,8,12]],"date-time":"2019-08-12T06:38:02Z","timestamp":1565591882000},"page":"165","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Algorithmic Matching Attacks on Optimally Suppressed Tabular Data"],"prefix":"10.3390","volume":"12","author":[{"given":"Kazuhiro","family":"Minami","sequence":"first","affiliation":[{"name":"Department of Statistical Science, School of Multidisciplinary Sciences, The Graduate University for Advanced Studies (SOKENDAI), Shonan Village, Hayama, Kanagawa 240-0193, Japan"},{"name":"The Institute of Statistical Mathematics, 10-3 Midori-cho, Tachikawa, Tokyo 190-8562, Japan"},{"name":"National Statistics Center, 19-1 Wakamatsu-cho, Shinjuku-Ku, Tokyo 162-8668, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yutaka","family":"Abe","sequence":"additional","affiliation":[{"name":"Department of Statistical Science, School of Multidisciplinary Sciences, The Graduate University for Advanced Studies (SOKENDAI), Shonan Village, Hayama, Kanagawa 240-0193, Japan"},{"name":"National Statistics Center, 19-1 Wakamatsu-cho, Shinjuku-Ku, Tokyo 162-8668, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2019,8,11]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1016\/j.ejor.2011.03.050","article-title":"Recent advances in optimization techniques for statistical tabular data protection","volume":"216","author":"Castro","year":"2012","journal-title":"Eur. J. Oper. Res."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Castro, J. (2002). Network Flows Heuristics for Complementary Cell Suppression: An Empirical Evaluation and Extensions. Inference Control in Statistical Databases, From Theory to Practice, Springer.","DOI":"10.1007\/3-540-47804-3_5"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Domingo-Ferrer, J., and Torra, V. (2004). Survey on Methods for Tabular Data Protection in ARGUS. Privacy in Statistical Databases, Springer.","DOI":"10.1007\/b97945"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1109\/TEVC.2011.2159271","article-title":"A Genetic Approach to Statistical Disclosure Control","volume":"16","author":"Smith","year":"2012","journal-title":"IEEE Trans. Evol. Comput."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"238","DOI":"10.1007\/BF01386316","article-title":"Partitioning procedures for solving mixed-variables programming problems","volume":"4","author":"Benders","year":"1962","journal-title":"Numer. Math."},{"key":"ref_6","unstructured":"(2019, August 10). tau-ARGUS Homepage. Available online: http:\/\/neon.vb.cbs.nl\/casc\/tau.htm."},{"key":"ref_7","first-page":"67","article-title":"Statistical Disclosure Control for Tabular Data in R","volume":"65","author":"Minami","year":"2017","journal-title":"Rom. Stat. Rev."},{"key":"ref_8","unstructured":"(2019, August 10). sdcTable: Methods for Statistical Disclosure Control in Tabular Data. Available online: https:\/\/cran.r-project.org\/web\/packages\/sdcTable\/index.html."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Hundepool, A., Domingo-Ferrer, J., Franconi, L., Giessing, S., Nordholt, E.S., Spicer, K., and de Wolf, P.P. (2012). Statistical Disclosure Control, Wiley.","DOI":"10.1002\/9781118348239"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"916","DOI":"10.1080\/01621459.2000.10474282","article-title":"Models and Algorithms for Optimizing Cell Suppression in Tabular Data with Linear Constraints","volume":"95","year":"2000","journal-title":"J. Am. Stat. Assoc."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"van Tilborg, H.C.A., and Jajodia, S. (2011). Kerckhoffs\u2019 Law. Encyclopedia of Cryptography and Security, Springer.","DOI":"10.1007\/978-1-4419-5906-5"},{"key":"ref_12","unstructured":"De Wolf, P.P., Hundepool, A., Giessing, S., Salazar, J.J., and Castro, J. (2014). tau-ARGUS Version 4.1 User\u2019s Manual, Statistics Netherlands."},{"key":"ref_13","unstructured":"Kikuchi, R., and Minami, K. (2017, January 20\u201322). On-site Service and Safe Output Checking in Japan. Proceedings of the Joint UNECE\/Eurostat Work Session on Statistical Data Confidentiality, Skopje, North Macedonia."},{"key":"ref_14","unstructured":"(2019, August 10). Guidelines for the Checking of Output Based on Microdata Research. Available online: http:\/\/research.cbs.nl\/casc\/ESSnet\/GuidelinesForOutputChecking_Dec2009.pdf."},{"key":"ref_15","unstructured":"(2019, August 10). Use of Public Survery Microdata (Onsite Use) in Japan (Japanese), Available online: https:\/\/www.e-stat.go.jp\/microdata\/data-use\/on-site."},{"key":"ref_16","unstructured":"(2019, August 10). lpSolve. Available online: https:\/\/cran.r-project.org\/web\/packages\/lpSolve\/index.html."},{"key":"ref_17","unstructured":"Wong, R.C.W., Fu, A.W.C., Wang, K., and Pei, J. (2007, January 23\u201327). Minimality Attack in Privacy Preserving Data Publishing. Proceedings of the 33rd International Conference on Very Large Data Bases (VLDB 2007), Vienna, Austria."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Jin, X., Zhang, N., and Das, G. (2010, January 22\u201326). Algorithm-safe Privacy-preserving Data Publishing. Proceedings of the 13th International Conference on Extending Database Technology (EDBT \u201910), Lausanne, Switzerland.","DOI":"10.1145\/1739041.1739116"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"557","DOI":"10.1142\/S0218488502001648","article-title":"k-anonymity: A model for protecting privacy","volume":"10","author":"Sweeney","year":"2002","journal-title":"Int. J. Uncertain. Fuzziness Knowl.-Based Syst."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Machanavajjhala, A., Kifer, D., Gehrke, J., and Venkitasubramaniam, M. (2007). L-diversity: Privacy beyond k-anonymity. ACM Trans. Knowl. Discov. Data, 1.","DOI":"10.1145\/1217299.1217302"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Li, N., Li, T., and Venkatasubramanian, S. (2007, January 11\u201315). t-Closeness: Privacy Beyond k-Anonymity and l-Diversity. Proceedings of the IEEE 23rd International Conference on Data Engineering, Istanbul, Turkey.","DOI":"10.1109\/ICDE.2007.367856"},{"key":"ref_22","unstructured":"Fung, B.C.M., Wang, K., and Yu, P.S. (2005, January 5\u20138). Top-Down Specialization for Information and Privacy Preservation. Proceedings of the 21st International Conference on Data Engineering (ICDE\u201905), Tokoyo, Japan."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"LeFevre, K., DeWitt, D.J., and Ramakrishnan, R. (2005, January 14\u201316). Incognito: Efficient full-domain K-anonymity. Proceedings of the 2005 ACM SIGMOD International Conference on Management of Data (SIGMOD \u201905), Baltimore, MD, USA.","DOI":"10.1145\/1066157.1066164"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Samarati, P., and Sweeney, L. (1998, January 1\u20134). Generalizing data to provide anonymity when disclosing information. Proceedings of the Seventeenth ACM SIGACT-SIGMOD-SIGART symposium on Principles of Database Systems (PODS \u201998), Seattle, WA, USA.","DOI":"10.1145\/275487.275508"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Sweeney, L. (1998). Datafly: A System for Providing Anonymity in Medical Data. Database Secur. XI, 356\u2013381.","DOI":"10.1007\/978-0-387-35285-5_22"},{"key":"ref_26","unstructured":"Wang, K., Philip, S.Y., and Chakraborty, S. (2004, January 1\u20134). Bottom-Up Generalization: A Data Mining Solution to Privacy Protection. Proceedings of the Fourth IEEE International Conference on Data Mining (ICDM \u201904), Brighton, UK."}],"container-title":["Algorithms"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-4893\/12\/8\/165\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T13:10:22Z","timestamp":1760188222000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-4893\/12\/8\/165"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,11]]},"references-count":26,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2019,8]]}},"alternative-id":["a12080165"],"URL":"https:\/\/doi.org\/10.3390\/a12080165","relation":{},"ISSN":["1999-4893"],"issn-type":[{"type":"electronic","value":"1999-4893"}],"subject":[],"published":{"date-parts":[[2019,8,11]]}}}