2/18/2004
Gio AAAS 04
6
Inference protection has the same duality
  Use actual cell counts .
  If inadequate,
aggregate up the hierarchy until count is adequate
Approach:
Assure that each result cell is based on many instances, reducing the likelihood of successful inference
Estimate expected lowest counts
for any possible query result.
Provide only data limited to a safe hierarchical level
Access Control
Release Filter
Never absolutely secure, but the best one can do now?