Disclosure-Protected Inference with Linked Microdata Using a Remote Analysis Server

Bleninger, P., Drechsler, J., and Ronning, G. (2010). Remote Data Access and the Risk of Disclosure from Linear Regression: An Empirical Study. Privacy in statistical databases, J. Domingo-Ferrer and E. Magkos (eds). New York: Springer.Search in Google Scholar

Chambers, R.L. and Skinner, C.J. (2003). Analysis of Survey Data. Hoboken, NJ: John Wiley and Sons.10.1002/0470867205Search in Google Scholar

Churches, T. and Christen, P. (2004). Some methods for blindfolded record linkage. BMC Medical Informatics and Decision Making, 4, Available at: http://www. pubmedcentral.nih.gov/tocrender.fcgi?iid¼10563 (accessed June 2012).Search in Google Scholar

Cox, L.H., Karr, A.F., and Kinney, S.K. (2011). Risk-Utility Paradigms for Statistical Disclosure Limitation: How to Think but not How to Act. International Statistical Review, 79, 160-183. DOI : http://dx.doi.org/10.1111/j.1751-5823.2011.00140.x Dwork, C. and Smith, A. (2009). Differential Privacy for Statistics: What We Know and What We Want to Learn. Journal of Privacy and Confidentiality, 1, 135-154.Search in Google Scholar

Gomatam, S., Karr, A., Reiter, J., and Sanil, A. (2005). Data Dissemination and Disclosure Limitation in a World Without Microdata: A Risk-Utility Framework for Remote Access Systems. Statistical Science, 20, 163-177. DOI : http://dx.doi.org/10.1214/08834230500000004310.1214/088342305000000043Search in Google Scholar

Herzog, T.N., Scheuren, F.L., and Winkler, W.E. (2007). Data Quality and Record Linkage. Berlin: Springer.Search in Google Scholar

Hosmer, D.W. and Lemeshow, S. (2000). Applied Logistic Regression. Hoboken, NJ: John Wiley and Sons Inc.10.1002/0471722146Search in Google Scholar

Karr, A.F., Lin, X., Sanil, A.P., and Reiter, J.P. (2009). Privacy Preserving Analysis of Vertically Partitioned Data Using Secure Matrix Products. Journal of Official Statistics, 25, 125-138.Search in Google Scholar

Kohnen, C. and Reiter, J.P. (2009). Multiple Imputation for Combining Confidential Data Owned by Two Agencies. Journal of the Royal Statistical Society Series A, 172, 511-528. DOI : http://dx.doi.org/10.1111/j.1467-985x.2008.00574.x 10.1111/j.1467-985X.2008.00574.xSearch in Google Scholar

Lucero, J. and Zayatz, L. (2010). The Microdata Analysis System at the U.S. Census Bureau. Privacy in Statistical Databases, J. Domingo-Ferrer and E. Magkos (eds). New York: Springer.Search in Google Scholar

McCullagh, P. and Nelder, J. (1989). Generalized Linear Models (2nd ed.). London: Chapman and Hall.10.1007/978-1-4899-3242-6Search in Google Scholar

O’Keefe, C. and Chipperfield, J.O. (2013). A Summary of Attack Methods and Confidentiality Protection Measures for Fully Automated Remote Analysis Systems. International Statistical Review. DOI : http://dx.doi.org/10.1111/insr.1202110.1111/insr.12021Search in Google Scholar

O’Keefe, C. and Good, N. (2009). Regression Output from a Remote Analysis System. Data & Knowledge Engineering, 68, 1175-1186. DOI : http://dx.doi.org/10.1016/j.datak.2009.06.00910.1016/j.datak.2009.06.009Search in Google Scholar

O’Keefe, C., Sparks, R., McAullay, D., and Loong, B. (2012). Confidentialising the Output of a Survival Analysis in a Remote Analysis System (to appear). Journal of Privacy and Confidentiality, 4, 127-154.Search in Google Scholar

Reiter, J. (2002). Satisfying Disclosure Restrictions with Synthetic Data Sets. Journal of Official Statistics, 18, 511-530.Search in Google Scholar

Shao, J. and Tu, D. (1995). The Jackknife and Bootstrap. Hoboken, NJ: John Wiley and Sons.10.1007/978-1-4612-0795-5Search in Google Scholar

Shlomo, N. (2007). Statistical Disclosure Control Methods for Census Frequency Tables. International Statistical Review, 75, 199-217. DOI : http://dx.doi.org/10.1111/j.1751-5823.2007.00010.x 10.1111/j.1751-5823.2007.00010.xSearch in Google Scholar

Skinner, C. and Shlomo, N. (2008). Assessing Identification Risk in Survey Microdata Using Log-Linear Models. Journal of American Statistical Association, 103, 989-1001. DOI : http://dx.doi.org/10.1198/01621450700000132810.1198/016214507000001328Search in Google Scholar

Sparks, R., Carter, C., Donnelly, J., O’Keefe, C., Duncan, J., and Keighley, T. (2008). Remote Access Methods for Exploratory Data Analysis and Statistical Modelling: Privacy-Preserving Analyticse. Computer Methods and Programs in Biomedicine, 91, 208-222. 10.1016/j.cmpb.2008.04.00118495290Search in Google Scholar