Efficient techniques for document sanitization

ABSTRACT

Sanitization of a document involves removing sensitive information from the document, so that it may be distributed to a broader audience. Such sanitization is needed while declassifying documents involving sensitive or confidential information such as corporate emails, intelligence reports, medical records, etc. In this paper, we present the ERASE framework for performing document sanitization in an automated manner. ERASE can be used to sanitize a document dynamically, so that different users get different views of the same document based on what they are authorized to know. We formalize the problem and present algorithms used in ERASE for finding the appropriate terms to remove from the document. Our preliminary experimental study demonstrates the efficiency and efficacy of the proposed algorithms.

REFERENCES

• 1: Eugene Agichtein , Luis Gravano , Jeff Pavel , Viktoriya Sokolova , Aleksandr Voskoboynik, Snowball: a prototype system for extracting relations from large text collections, Proceedings of the 2001 ACM SIGMOD international conference on Management of data, p.612, May 21-24, 2001, Santa Barbara, California, United States
• 2: Rakesh Agrawal , Ramakrishnan Srikant, Fast Algorithms for Mining Association Rules in Large Databases, Proceedings of the 20th International Conference on Very Large Data Bases, p.487-499, September 12-15, 1994
• 3: Aaron Ceglar , John F. Roddick, Association mining, ACM Computing Surveys (CSUR), v.38 n.2, p.5-es, 2006 [doi>10.1145/1132956.1132958]
• 4: Venkatesan T. Chakaravarthy , Himanshu Gupta , Prasan Roy , Mukesh Mohania, Efficiently linking text documents with relevant structured information, Proceedings of the 32nd international conference on Very large data bases, September 12-15, 2006, Seoul, Korea
• 5: Amit Chandel , P. C. Nagesh , Sunita Sarawagi, Efficient Batch Top-k Search for Dictionary-based Entity Recognition, Proceedings of the 22nd International Conference on Data Engineering, p.28, April 03-07, 2006 [doi>10.1109/ICDE.2006.55]
• 6: M. Douglass, G. Clifford, A. Reisner, W. Long, G. Moody, and R.G.Mark. De-identification algorithm for free-text nursing notes. In Computers in Cardiology, 2005.
• 7: Michael R. Garey , David S. Johnson, Computers and Intractability: A Guide to the Theory of NP-Completeness, W. H. Freeman & Co., New York, NY, 1979
• 8: Kristen LeFevre , David J. DeWitt , Raghu Ramakrishnan, Incognito: efficient full-domain K-anonymity, Proceedings of the 2005 ACM SIGMOD international conference on Management of data, June 14-16, 2005, Baltimore, Maryland [doi>10.1145/1066157.1066164]
• 9: Andrew McCallum, Information Extraction: Distilling Structured Data from Unstructured Text, Queue, v.3 n.9, November 2005 [doi>10.1145/1105664.1105679]
• 10: PARC. Xerox unveils technology that blocks access to sensitive data in documents to prevent security leaks, 2007. http://www.parc.com/about/pressroom/news/2007-10-15-redaction.html.
• 11: Y. Saygin, D. Hakkani-Tur, and G. Tur. Sanitization and anonymization of document repositories. In Web and Information Security, 2005.
• 12: L. Sweeney. Replacing personally-identifying information in medical records, the srub system. In Journal of the Americal Medical Informatics Association, 1996.
• 13: Latanya Sweeney, k-anonymity: a model for protecting privacy, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, v.10 n.5, p.557-570, October 2002 [doi>10.1142/S0218488502001648]
• 14: A. Tveit. Anonymization of general practitioner medical records. In HelsIT'04, Trondheim, Norway, 2004.
• 15: U.S. Department of Energy. Department of energy researches use of advanced computing for document declassification.
• 16: Wikipedia. Sanitization (classified information) - wikipedia, the free encyclopedia, 2008.
• 17: David Zuckerman, Linear degree extractors and the inapproximability of max clique and chromatic number, Proceedings of the thirty-eighth annual ACM symposium on Theory of computing, May 21-23, 2006, Seattle, WA, USA [doi>10.1145/1132516.1132612]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Unauthorized access (e.g., hacking, phreaking)

General Terms:
Algorithms, Performance, Security

Keywords:
anonymization, redaction, sanitization