오픈 데이터 환경에서 개인정보 노출 위험 측정을 위한 통계적 방법론 연구
A Statistical Methodology Study for Measuring Privacy Disclosure Risk in Open Data Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 합성데이터는 실제 데이터의 패턴과 특성을 유지하면서도 프라이버시 유출을 예방할 수 있는 기술로 각광받고 있다. 그에 따라 합성데이터 활용에 대한 기술적 및 제도적 연구가 활발하게 진행되고 있지만, 명확한 표준과 지침이 부재하여 합성데이터 기술의 적극적 활용이 어렵다. 본 연구는 합성데이터의 개인정보 노출 위험 정량화를 위한 전초적 연구로 통계적 방법론을 활용하여 개인정보 노출 위험 정량화 지수를 도출하고 유럽 개인정보 보호 규정(General Data Protection Regulation)를 준수하기 위한 구체적인 적용 방안을 제시한다. 오픈 데이터 환경에서 본 연구의 개인정보 노출 위험 지수를 통해 개인정보 노출 위험을 인식하고 데이터 활용성과의 균형을 조절할 수 있을 것으로 기대한다.
Abstract
Recently, Syntheic data has been in the spotlight as a technology that can protect personal information while maintaining the patterns and characteristics of actual data. Accordingly, technical and institutional research on synthetic data is actively being conducted, but it is difficult to actively use synthetic data due to the lack of clear standards and guidelines. This study is a preliminary study for quantifying the disclosure risk of synthetic data, and derives a privacy disclosure risk index through statistical methodology and suggests specific application measures to comply with the General Data Protection Regulation(GDPR). It is expected that the disclosure risk and the balance of data utility can be controlled through the privacy disclosure risk index of this study in an open data environment.
참고문헌 (16)
- Office for Government Policy Coordination, Ministry of Government Administration and Home Affairs, "Guideline for Personal Information De-identification Measures", ~ (2016)
- Personal Information Protection Commission, "Pseudonymous information processing guidelines", ~ (2022)
- The European Parliament and of the Council, "The protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95", 46, Regulation (EU) 2016, pp.679, 2016[DOI]
- Article 29 Working Party, "A critical appraisal of the Article 29 Working Party Opinion 05", 2014 on data anonymization techniques, 2014, pp.5(1), 73~87
- "ISO", IEC 20889:2018, Privacy enhancing data de-identification terminology and classification of techniques, 2018, pp.46~
- Hong Dong-Suk, "Generating and Validating Synthetic Training Data for Predicting Bankruptcy of Individual Businesses", Journal of Information & Communication Convergence Engineering, 19(4), pp.228~233 (2021)
- Hyunwoo Jung, "Comparison study of synthetic data generation methods for credit card transaction data", Journal of the Korean Data And Information Science Society, 34(1), pp.49~72 (2023)
- Sun, Chang, "Generating synthetic personal health data using conditional generative adversarial networks combining with differential privacy", Journal of Biomedical Informatics, 143(C), pp.104404~ (2023)
- Seongbin An, "A comparison of synthetic data approaches using utility and disclosure risk measures", The Korean Journal of Applied Statistics, 36(2), pp.141~166 (2023)
- Bourou, Stavroula, "A review of tabular data synthesis using GANs on an IDS dataset", MDPI Information, 12(09), pp.375~ (2021)
- Espinosa, Erica, "On the Quality of Synthetic Generated Tabular Data", MDPI Mathematics, 11(15), pp.3278~ (2023)
- Van Breugel, Boris, "Membership inference attacks against synthetic data through overfitting detection", Proceedings of the 26th International Conference on Artificial Intelligence and Statistics(AISTATS), pp.3493~3514 (2023)
- Ricardo Muñoz-Cancino, "Assessment of Creditworthiness Models Privacy-Preserving Training withSynthetic Data", Hybrid Artificial Intelligent Systems: 17th International Conference(HAIS 2022), pp.60~72 (2022)
- Matthieu Meeus, "Achilles’ Heels: Vulnerable Record Identification in Synthetic Data Publishing", Computer Security – ESORICS 2023: 28th European Symposium on Research in Computer Security, pp.182~198 (2023)
- Little, Claire, "Comparing the Utility and Disclosure Risk of Synthetic Data with Samples of Microdata", Privacy in Statistical Databases:International Conference(PSD 2022), pp.234~249 (2022)
- Dwork, Cynthia, "The algorithmic foundations of differential privacy", Foundations and Trends® in Theoretical Computer Science, 9(3-4), pp.211~407 (2014)