Privacy-preserving cox regression for survival analysis

ABSTRACT

Privacy-preserving data mining (PPDM) is an emergent research area that addresses the incorporation of privacy preserving concerns to data mining techniques. In this paper we propose a privacy-preserving (PP) Cox model for survival analysis, and consider a real clinical setting where the data is horizontally distributed among different institutions. The proposed model is based on linearly projecting the data to a lower dimensional space through an optimal mapping obtained by solving a linear programming problem. Our approach differs from the commonly used random projection approach since it instead finds a projection that is optimal at preserving the properties of the data that are important for the specific problem at hand. Since our proposed approach produces an sparse mapping, it also generates a PP mapping that not only projects the data to a lower dimensional space but it also depends on a smaller subset of the original features (it provides explicit feature selection). Real data from several European healthcare institutions are used to test our model for survival prediction of non-small-cell lung cancer patients. These results are also confirmed using publicly available benchmark datasets. Our experimental results show that we are able to achieve a near-optimal performance without directly sharing the data across different data sources. This model makes it possible to conduct large-scale multi-centric survival analysis without violating privacy-preserving requirements.

REFERENCES

• 1: Rakesh Agrawal , Ramakrishnan Srikant, Privacy-preserving data mining, ACM SIGMOD Record, v.29 n.2, p.439-450, June 2000
• 2: Keke Chen , Ling Liu, Privacy Preserving Data Classification with Rotation Perturbation, Proceedings of the Fifth IEEE International Conference on Data Mining, p.589-592, November 27-30, 2005 [doi>10.1109/ICDM.2005.121]
• 3: D. R. Cox. Regression models and life tables (with discussion). Journal of the Royal Statistical Society, Series B 34:187--220, 1972.
• 4: D. R. Cox and D. Oakes. Analysis of Survival Data. Chapman and Hall, 1984.
• 5: C. Dehing-Oberije, D. D. Ruysscher, H. van der Weide, and et al. Tumor volume combined with number of positive lymph node stations is a more important prognostic factor than tnm stage for survival of non-small-cell lung cancer patients treated with (chemo)radiotherapy. Int J Radiat Oncol Biol Phys, in press.
• 6: W. Du, Y. Han, and S. Chen. Privacy-preserving multivariate statistical analysis: Linear regression and classification. In Proceedings of the Fourth SIAM International Conference on Data Mining, pages 222--233, 2004. http://citeseer.ist.psu.edu/du04privacypreserving.html.
• 7: Frank E. Harrell, Jr., Regression Modeling Strategies, Springer-Verlag New York, Inc., Secaucus, NJ, 2006
• 8: W. Johnson and J. Lindenstrauss. Extensions of Lipschitz maps into a Hilbert space. Contemp. Math, 26:189--206, 1984.
• 9: W. Knaus, F. E. Harrell, J. Lynn, et al. The SUPPORT prognostic model: Objective estimates of survival for seriously ill hospitalized adults. Annals of Internal Medicine, 122:191--203, 1995.
• 10: Sven Laur , Helger Lipmaa , Taneli Mielikäinen, Cryptographically private support vector machines, Proceedings of the 12th ACM SIGKDD international conference on Knowledge discovery and data mining, August 20-23, 2006, Philadelphia, PA, USA [doi>10.1145/1150402.1150477]
• 11: H. Li and Y. Luan. Kernel Cox Regression Models for Linking Gene Expression Profiles to Censored Survival Data. In Pacific Symposium on Biocomputing 8, pages 65--76, 2003.
• 12: Kun Liu , Hillol Kargupta , Jessica Ryan, Random Projection-Based Multiplicative Data Perturbation for Privacy Preserving Distributed Data Mining, IEEE Transactions on Knowledge and Data Engineering, v.18 n.1, p.92-106, January 2006 [doi>10.1109/TKDE.2006.14]
• 13: L. Liu, J. Wang, Z. Lin, and J. Zhang. Wavelet-based data distortion for privacy-preserving collaborative analysis. Technical Report 482-07, Department of Computer Science, University of Kentucky, Lexington, KY 40506, 2007. riptsize http://www.cs.uky.edu/ jzhang/pub/MINING/lianliu1.pdf.
• 14: O. L. Mangasarian and T. Wild. Privacy-preserving classification of horizontally partitioned data via random kernels. Technical Report 07-02, Computer sciences department, university of Wisconsin - Madison, Madison, WI, 2007.
• 15: S. R. M. Oliveira and O. R. Zaïane. Privacy preservation when sharing data for clustering. In Proceedings of the International Workshop on Secure Data Management in a Connected World, pages 67--82, Toronto, Canada, August 2004.
• 16: Rómer Rosales , Glenn Fung, Learning sparse metrics via linear programming, Proceedings of the 12th ACM SIGKDD international conference on Knowledge discovery and data mining, August 20-23, 2006, Philadelphia, PA, USA [doi>10.1145/1150402.1150444]
• 17: B. Schölkopf and A. J. Smola. Learning with Kernels. MIT Press, 2002.
• 18: Vassilios S. Verykios , Elisa Bertino , Igor Nai Fovino , Loredana Parasiliti Provenza , Yucel Saygin , Yannis Theodoridis, State-of-the-art in privacy preserving data mining, ACM SIGMOD Record, v.33 n.1, March 2004 [doi>10.1145/974121.974131]
• 19: Ming-Jun Xiao , Liu-Sheng Huang , Yong-Long Luo , Hong Shen, Privacy Preserving ID3 Algorithm over Horizontally Partitioned Data, Proceedings of the Sixth International Conference on Parallel and Distributed Computing Applications and Technologies, p.239-243, December 05-08, 2005 [doi>10.1109/PDCAT.2005.191]
• 20: Hwanjo Yu , Xiaoqian Jiang , Jaideep Vaidya, Privacy-preserving SVM using nonlinear kernels on horizontally partitioned data, Proceedings of the 2006 ACM symposium on Applied computing, April 23-27, 2006, Dijon, France [doi>10.1145/1141277.1141415]

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
      I.2.m Miscellaneous

General Terms:
Algorithms, Performance, Theory

Keywords:
cox regression, privacy-preserving data mining, survival analysis