Search papers, labs, and topics across Lattice.
This paper introduces A-COMPASS, an enhanced version of the Compliance Assertion Language (COMPASS) tailored for verifying anonymity in microdata tables structured as one record per individual. By modifying COMPASS, A-COMPASS not only checks existing anonymity conditions but also facilitates the execution of anonymization actions, addressing a significant gap in formal verification of privacy models. The authors establish the syntax and semantics of A-COMPASS, proving key properties such as determinism and compositionality, and providing mechanisms to verify essential anonymity properties like k-anonymity and l-diversity.
A-COMPASS transforms privacy verification by enabling dynamic anonymization actions while ensuring compliance with critical anonymity standards.
In the information age, one of the leading problems is how to ensure individual's privacy. Depending on the context in which privacy is considered, various data privacy models have emerged. However, the domain of formal verification of these models is still not sufficiently explored even when it comes to the most basic models. An attempt to verify privacy requirements is the Compliance Assertion Language (COMPASS). In COMPASS, one can specify an anonymity condition that a table needs to satisfy, and an action that will modify the table if the condition is not satisfied. It is designed to operate on preprocessed tables in a form one record - one group of people. In this paper, we modify the COMPASS language in order to operate on microdata tables in their usual form of one record - one person. The modified language is called A-COMPASS. Along with checking of previously applied anonymity conditions, A-COMPASS enables the execution of anonymization actions as a new feature. We further provide the syntax and the semantics for the A-COMPASS language. We also prove the most important properties of the introduced semantics like determinism and compositionality. Finally, we provide a mechanism to verify anonymity properties, such as k-anonymity and l-diversity.
