Privacy trade-offs in web-based servicesClaus Boyens111.123480#16445480#28961.271.389430#56629102.12.1.1112.1.2483#801213142.22.2.115386#1162.2.216172.2.32.2.3.1182.2.3.2192.2.3.3202.32.3.121480#992.3.2222.3.32.3.3.12.3.3.22324252.3.3.3262.3.3.4272.42.4.128292.4.2302.5313313.1323.23334353.336373839546#27340585#4943.44119#1719#254243377#246444546123#23131#45124#23123#23124#23124#23123#23124#23473.53.5.1585#3513.5.248585#1943.5.34950515253543.6553.6.1565758596061623.6.2636465663.767686970717273743.83.8.175480#1923.8.27677551#29978502#26279502#2933.8.380586#234813.982482834.14.1.1480#99844.1.2387#3008586374#23287884.1.38990520#3084.1.4914.24.2.14.2.292934.34.3.1944.3.29596116#51120#51119#51974.3.398994.3.4100116#51115#51115#511014.3.5102103433#2391044.4105383#1934.4.1106363#2981074.4.21084.4.3109430#292110155#4987#45155#494.54.5.11111124.5.21131144.5.3115503#3441164.64.6.1117585#3961184.6.24.6.2.1119271#45267#45271#45268#45165#51176#47348#47175#47345#47176#47353#47175#47349#4712012112212343#37124125585#3534.7126165#51127329#47324#47331#47327#47128129586#216130360#430585#3934.84.8.11314.8.2132565#3481334.8.3134135528#2721364.8.44.8.4.1137197#67203#67237#67138239#67403#67139317#52283#32140317#101199#97127#571414.8.4.2142575#275143565#2951444.8.54.8.5.1145557#3091464.8.5.2147148554#3054.8.61494.915051511525.15.1.15.1.1.1153140#611545.1.1.2141#56155339#565.1.2156318#2095.1.315712#23208#5315887#47175#55159160582#32416145#41396#855.1.4162586#3165.2163218#1975.2.11645.2.25.2.2.11655.2.2.26166167168169AcknowledgementsAbbreviationsReferences References

Ackerman, M.; Cranor, L. and Reagle, J. (1999): Privacy in e-commerce: examining user scenarios and privacy preferences, Proceedings of the 1st ACM conference on Electronic commerce (ACM-EC '99),

Denver, Colorado

. http://portal.acm.org/citation.cfm?id=336992.336995&coll=portal&dl=ACM&type=series&idx=336992&part=Proceedings&WantType=Proceedings&title=Electronic%20Commerce Adam, N. and Wortman, J. (1989): Security-control methods for statistical databases, ACM Computing Surveys 21 [4], pp.515-556. http://portal.acm.org/citation.cfm?id=76895&dl=ACM Agrawal, R. and Srikant, R. (2000): Privacy-preserving Data Mining, Proceedings of the ACM Conference on Management of Data (SIGMOD 2000),

Dallas, Texas

. http://portal.acm.org/citation.cfm?id=335438&dl=GUIDE&coll=GUIDE Ahituv, N.; Lapid, Y. and Neumann, S. (1987): Processing encrypted data, Communications of the ACM 30 [9], pp.777-780. http://portal.acm.org/citation.cfm?id=30404&dl=ACM&coll=portal Amazon.com 2004 Privacy Notice 2004 May 26 April 3, 2003. http://www.amazon.com/exec/obidos/tg/browse/-/468496/103-7024010-9846235 Asonov, D. and Freytag, J. C. (2002): Almost Optimal Private Information Retrieval, Proceedings of the 2nd Workshop on Privacy Enhancing Technologies (PET '02),

San Francisco

. http://www.springerlink.com/index/L74U3JTG48Y6EYT0.pdf Asonov, D.; Freytag, J. C. and Schaal, M. (2001): Absolute Privacy in Voting, Proceedings of the Information Security Conference,

Málaga, Spain

. http://www.isconference.org/cp.html Ballou, D. P. and Tayi, G. (1999): Enhancing data quality in data warehouse environments, Communications of the ACM 42 [1], pp.73-78. http://portal.acm.org/citation.cfm?id=291471&dl=ACM&coll=portal Barak, B.; Goldreich, O.; Impagliazzo, R.; Rudich, S.; Sahai, A.; Vadhan, S. and Yang, K. (2001): On the (Im)possibility of Obfuscating Programs, Proceedings of Advances in Cryptology (CRYPTO 01). http://www.springerlink.com/index/TELALQDCX3N600UF.pdf Bayer, R. and McCreight, E. M. (1972): Organization and Maintenance of Large Ordered Indices, Acta Informatica [1], pp.173-189. Berendt, B. and Teltzrow, M. (2003): Adressing Users' Privacy Concerns for Improving Personalization Quality: Towards an Integration of User Studies and Algorithm Evaluation, Proceedings of the Workshop on Intelligent Techniques for Web Personalization (ITWP '03),

Acapulco, Mexico

. Berndt, D.; Fisher, J.; Hevner, A. and Studenicki, J. (2001): Healthcare Data Warehousing and Quality Assurance, IEEE Computer 34 [12], pp.56-65. http://www.coba.usf.edu/berndt/research/papers/computer2001quality.pdf Boyens, C. and Fischmann, M. (2003): Profiting from Untrusted Parties in in Web-based Applications, Proceedings of the 4th International Conference on Electronic Commerce and Web Technologies (EC-Web '03),

Prague, CZ

. http://www.springerlink.com/index/W0DEAY7BQ59TPQ2A.pdf Boyens, C. and Günther, O. (2002): Trust Is not Enough: Privacy and Security in ASP and Web Service Environments, Proceedings of the 6th East-European Conference on Advances in Database and Information Systems (ADBIS 2002),

Bratislava, Slovakia

. http://portal.acm.org/citation.cfm?id=676750&dl=ACM&coll=portal Boyens, C. and Günther, O. (2003): Using Online Services in Untrusted Environments - A Privacy-Preserving Architecture, Proceedings of the 11th European Conference on Information Systems (ECIS '03),

Naples, Italy

. http://www.wiwi.hu-berlin.de/~boyens/pubs/ECIS-Boyens_Guenther-Using_Online_Services.pdf Boyens, C. and Günther, O. (2004): Detection and limitation of interval inference in statistical databases, Poster Session at the 16th International Conference on Scientific and Statistical Database Management (SSDBM 2004),

Santorini, Greece

. http://cgi.di.uoa.gr/~ssdbm04/inf1.htm Boyens, C.; Günther, O. and Teltzrow, M. (2002): Privacy Conflicts in CRM Services for Online Shops: A Case Study, Proceedings of the IEEE ICDM Workshop on Privacy, Security and Data Mining,

Maebashi City, Japan

. http://portal.acm.org/citation.cfm?id=850787&dl=ACM&coll=portal Boyens, C.; Krishnan, R. and Padman, R. (2004): On Privacy-Preserving Access to Distributed Heterogeneous Healthcare Data, Proceedings of the 37th Hawai'ian International Conference on System Sciences (HICSS-37),

Hawai'i

. http://www.sigmod.org/sigmod/dblp/db/conf/hicss/hicss2004-6.html Boyens, C. and Padman, R. (2003): On the Design of Data Dissemination Strategies in the Presence of Interval Inference, Proceedings of the 13th Workshop on Information Technology and Systems (WITS '03),

Seattle, WA

. http://www.wiwi.hu-berlin.de/~boyens/pubs/WITS-Boyens_Padman-On_the_Design.pdf Brackstone, G. J. (1999): Managing data quality in a statistical agency, Survey methodology 25 [02]. http://www.statcan.ca/english/IPS/Data/12-001-XPB19990024877.htm Brickell, E. and Yacobi, Y. (1987): On privacy homomorphisms, Proceedings of Advances in Cryptology (EUROCRYPT '87). http://dsns.csie.nctu.edu.tw/research/crypto/HTML/PDF/E87/117.PDF Canny, J. (2002): Collaborative Filtering with privacy, Proceedings of the 2002 IEEE Symposium on Security and Privacy. http://portal.acm.org/citation.cfm?id=830525&dl=ACM&coll=GUIDE Canny, J. (2002): Collaborative Filtering with privacy via factor analysis, Proceedings of the 25th Annual International ACM Conference on Research and Development in Information Retrieval (SIGIR 2002),

Tampere, Finland

. http://portal.acm.org/citation.cfm?id=564419&dl=ACM&coll=portal Carter, T. 2000 ASP arena: Security remains top concernASPstreet.com October 31, 2000. http://www.aspstreet.com/archive/d.taf/what%2Cshow/id%2C4581/c%2C22 Chaudhuri, S. and Dayal, U. (1997): An Overview of Data Warehousing and OLAP, ACM SIGMOD Record 26 [1], pp.65-74. http://www.acm.org/sigmod/record/issues/9703/chaudhuri.ps Chin, F. Y. and Özsoyoglu, G. (1982): Auditing and inference control in statistical databases, IEEE Transactions on Software Engineering 8 [6], pp.113-139. Chor, B.; Kushilevitz, E.; Goldreich, O. and Sudan, M. (1995): Private Information Retrieval, Journal of the ACM 45 [6], pp.965-981. http://portal.acm.org/citation.cfm?id=293350&dl=ACM&coll=portal Chowdhury, S. D.; Duncan, G.; Krishnan, R.; Roehrig, S. and Mukherjee, S. (1999): Disclosure detection in multivariate categorical databases: auditing confidentiality protection through two new matrix operators, Management Science 45 [12], pp.1710-1723. http://portal.acm.org/citation.cfm?id=337139&jmp=indexterms&dl=portal&dl=ACM Clifton, C. 2001 Privacy Preserving Distributed Data MiningPurdue University, Department of Computer Sciences November 9, 2001. http://www.cs.purdue.edu/homes/clifton/DistDM/CliftonDDM.pdf Clifton, C. and Marks, D. (1996): Security and privacy implications of data mining, ACM SIGMOD Workshop on Research Issues on Data Mining and Knowledge Discovery. http://www.cs.purdue.edu/homes/clifton/document/dmkd.pdf Codd, E. F. (1970): A Relational Model of Data for Large Shared Data Banks, Communications of the ACM 13 [6], pp.377-387. http://portal.acm.org/citation.cfm?id=362685&dl=ACM&coll=portal Cox, L. H. (1980): Suppression methodology and statistical disclosure control, Journal of the Amercian Statistical Association 75 [370], pp.377-385. CSI (2003): CSI/FBI Computer Crime and Security Survey, Computer Security Issues and Trends VIII [1]. http://www.gocsi.com/awareness/topline.jhtml Cutler, M. and Sterne, J. 2000 E-Metrics. Business Metrics For The New EconomyNetGenesis. http://www.emetrics.org/articles/emetrics.pdf Damiani, E.; Vimercati, S. De Capitani di; Jajodia, S.; Paraboschi, S. and Samarati, P. (2003): Balancing Confidentiality and Efficiency in Untrusted Relational DBMSs, Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS 2003),

Washington, DC, USA

. http://portal.acm.org/citation.cfm?id=948124 DARPA 1981 RFC 791: Internet ProtocolDefense Advanced Research Projects Agency September 1981. http://www.faqs.org/rfcs/rfc791.html DARPA 1981 RFC 793: Transmission Control ProtocolDefense Advanced Research Projects Agency September 1981. http://www.faqs.org/rfcs/rfc793.html Denning, D. (1982): Cryptography and Data Security, Addison Wesley. Denning, D. E. (1980): Secure statistical databases with random sample queries, ACM Transactions on Database Systems (TODS) 5 [3], pp.291-315. http://portal.acm.org/citation.cfm?id=320616&coll=portal&dl=ACM DHS 2004 Office of Homeland Security 2004 July 6. http://www.whitehouse.gov/homeland Dobkin, D.; Jones, A. K. and Lipton, R. J. (1979): Secure databases: Protection against user influence, ACM Transactions on Database Systems (TODS) 4 [1], pp.97-106. http://portal.acm.org/citation.cfm?id=320068&dl=ACM&coll=portal Domingo-Ferrer, J. (1996): A new privacy homomorphism and applications, Information Processing Letters 60 [5], pp.277-282. Domingo-Ferrer, J. (1997): Multi-application smart cards and encrypted data processing, Future Generation Computer Systems 13 [1], pp.65-75. http://citeseer.ist.psu.edu/299517.html Domingo-Ferrer, J. and Herrera-Joancomarti, J. (1999): A privacy homomorphism allowing field operations on encrypted data, Jornades de Matematica Discreta i Algorismica,

Barcelona

. Domingo-Ferrer, J. and Mateo-Sanz, J. M. (2002): Practical Data-Oriented Microaggregation for Statistical Disclosure Control, IEEE Transactions on Knowledge and Data Engineering 14 [1], pp.189-201. http://portal.acm.org/citation.cfm?id=628201&dl=ACM&coll=portal Domingo-Ferrer, J.; Mateo-Sanz, J. M. and Torra, V. (2001): Comparing SDC methods for microdata on the basis of information loss and disclosure risk, Pre-proceedings of ETK-NTTS '2001 (vol. 2),

Luxemburg

. Domingo-Ferrer, J.; Oganian, A. and Torra, V. (2002): Information-theoretic disclosure risk measures in statistical disclosure control of tabular data, Proceedings of the 14th International Conference on Scientific and Statistical Database Management (SSDBM '02),

Edinburgh, Scotland

. http://ssdbm.soc.napier.ac.uk/show.php3?op=show&page=finalprogramme Duncan, G.; Fienberg, S.; Krishnan, R.; Padman, R. and Roehrig, S. (2001): Disclosure Limitation Methods and Information Loss for Tabular Data, Doyle, P.; Lane, J.; Theeuwes, J. and Zayatz, L., Eds, Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies, pp. 135-166, Elsevier. http://www.niss.org/dg/technicalreports.html Duncan, G.; Keller-McNulty, S. and Stokes, S. 2001 Disclosure Risk vs. Data Utility: The R-U Confidentiality MapSecondary Title: Technical Report LA-UR-01-6428Los Alamos National Laboratory. http://www.niss.org/technicalreports/tr121.pdf Duncan, G.; Krishnan, R.; Padman, R.; Reuter, P. and Roehrig, S. 2004 Exact and heuristic methods for cell suppression in multi-dimensional linked tablesSecondary Title: Digital Government II: Technical reportsNational Institute of Statistical Sciences. http://www.niss.org/dgii/TR/roehrig-suppres2.pdf Economist (1999): The end of privacy: The surveillance society, The Economist, May 1, 1999, pp. 21-23. EPIC 2004 Comments of the Electronic Privacy Information Center Electronic Privacy Information Center July 1, 2004. http://www.epic.org/privacy/airtravel/rt_comments.pdf EPIC 2004 Cookies Electronic Privacy Information Center May 19, 2004. http://www.epic.org/privacy/internet/cookies/ Ernst & Young 2003 P3P Dashboard Report July 2003. www.ey.com/global/download.nsf/US/P3P_Dashboard_-_July_2003/$file/E&YP3PDashboardJuly2003.pdf EU 1995 Directive 95/46/EC of the European Parliament and of the European Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data; Tertiary Title: European Union. http://europa.eu.int/comm/internal_market/en/media/dataprot/law/index.htm EU 2002 Directive 2002/58/EC of the European Parliament and of the European Council Concerning the Processing of Personal Data and the Protection of Privacy in the Electronic Communications SectorTertiary Title: European Union July 12, 2002. http://europa.eu.int/eur-lex/pri/en/oj/dat/2002/l_201/l_20120020731en00370047.pdf Fellegi, I. P. (1972): On the question of statistical confidentiality, Journal of the American Statistical Association 67 [337], pp.7-18. Fieger, W. 1996 Mathematik für Wirtschaftswissenschaftler : Secondary Title: Universität Karlsruhe, Skript zur Vorlesung WS 1996/97 Fischmann, Matthias and Günther, Oliver (2003): Privacy Tradeoffs in Database Service Architectures, Proceedings of the First ACM International Workshop on Business-Driven Security (BIZSEC 2003),

Fairfax, VA

. http://www.acm.org/sigs/sigsac/ccs/CCS2003/bizsec.html Fourer, R.; Gay, D. M. and Kernighan, B. W. (2003): AMPL - A modelling language for mathematical programming, 2. ed., Thomson. Fox, S. and Rainie, L. 2000 Trust and Privacy Online: Why Americans Want to Rewrite the RulesSecondary Title: Pew Internet & American Life Project

Washington, D.C.

. http://www.pewinternet.org/report_display.asp?r=19 Goldreich, O. 1998 Secure Multi-Party Computation. http://www.wisdom.weizmann.ac.il/~oded/pp.html Gopal, R.; Goes, P. and Garfinkel, R. (1998): Interval Protection of Confidential Information in a database, INFORMS Journal on Computing 10 [3]. Hacigumus, H.; Iyer, B. and Mehrota, S. (2002): Providing Database as a Service, Proceedings of the IEEE International Conference on Data Engineering (ICDE 2002),

San Jose, CA

. Hacigumus, H.; Mehrotra, S.; Iyer, B. and Li, C. (2002): Executing SQL over Encrypted Data in the Database Service Provider Model, Proceedings of the ACM Conference on Management of Data (SIGMOD 2002). Harangsri, B.; Matsushima, S.; Shepherd, J. and Ngu, A. H. H. (1997): Handling missing values in database systems using a naive bayesian classifier, Proceedings of the ACM SIGMOD Workshop on Research Issues in Data Mining and Knowledge Discovery,

Tucson, Arizona

. HIPAA 1996 Healthcare Insurance Portability Accountability Act. http://www.cms.hhs.gov/hipaa/ IAO 2003 Report to the United States Congress regarding the Total Information Awareness (TIA) programDARPA Information Awareness Office May 20, 2003. http://www.epic.org/privacy/profiling/tia/may03_report.pdf IBM 1999 IBM Multi-national Consumer Privacy survey 2004 July 8. http://www-1.ibm.com/services/files/privacy_survey_oct991.pdf IDC 1999 The ASP's impact on the IT industry: An IDC-wide opinionInternational Data Corporation Inmon, W. H. (1996): Building the Data Warehouse, 2. ed., John Wiley & Sons. ITU 2000 Recommendation X.509International Telecommunication Union. http://www.itu.int/rec/recommendation.asp?type=folders&lang=e&parent=T-REC-X.509 Jarvenpaa, S. L.; Tractinsky, N. and Vitale, M. (2000): Consumer Trust in an Internet Store, Information Technology and Management 1 [1-2], pp.45-71. Johnson, R.; Molnar, D.; Song, D. X. and Wagner, D. (2002): Homomorphic Signature Schemes, Proceedings of CT-RSA 2002,

San Jose, CA

. Kobsa, A. (2001): Tayloring Privacy to Users' Needs, Proceedings of the 8th International Conference on User Modeling,

Sonthofen, Germany

. Kobsa, A. (2002): Personalized Hypermedia and International Privacy, Communications of the ACM 45 [5], pp.64-67. Kossmann, D. (2000): The state of the art in distributed query processing, ACM Computing Surveys 32 [4], pp.422-469. Krishnan, R.; Li, X.; Steier, D. and Zhao, L. (2001): On Heterogeneous Database Retrieval: A Cognitively Guided Approach, Information Systems Research 12 [3], pp.286-301. http://www.extenza-eps.com/extenza/contentviewing/viewArticle.do?articleId=9711&objectIDValue=9711&type=article Lenz, H.-J. and Rödel, E. (1991): Statistical Quality Control of Data, Proceedings of DGOR. Li, Y.; Wang, L. and Jajodia, S. (2002): Preventing Interval-Based Inference by Random Data Perturbation, Proceedings of the Second International Workshop on Privacy Enhancing Technologies (PET 2002),

San Francisco, CA

. Li, Y.; Wang, L.; Wang, X. and Jajodia, S. (2002): Auditing Interval-Based Inference, Proceedings of the 14th Conference on Advanced Information Systems Engineering (CAiSE'02),

Toronto, Canada

. Li, Y.; Zhu, S.; Wang, L. and Jajodia, S. (2002): A privacy-enhanced microaggregation method, Proceedings of Foundations of Information and Knowledge Systems (FoIKS 2002),

Salzan Castle, Germany

. Lindell, Y. and Pinkas, B. (2000): Privacy-preserving data mining, Proceedings of Advances in Cryptology (CRYPTO 2000),

Santa Barbara, CA

. Maurer, U. (2004): The Role of Crypthography in Database Security, Proceedings of the ACM Conference on Management of Data (SIGMOD '04),

Paris, France

. Mizoras, A.; Whalen, M.; Goepfert, J.; Moser, K. and Graham, S. 2001 Worldwide ASP revenues Approached $1 Billion in 2000Secondary Title: IDC BulletinInternational Data Corporation June 5, 2001 Naor, Moni and Pinkas, Benny (2001): Efficient Oblivious Transfer Protocols, Proceedings of the 12th Annual ACM-SIAM Symposium on Discrete Algorithms. Naumann, F. (2002): Quality-driven query answering for integrated information systems 2261, Lecture Notes in Computer Science, Springer Verlag. Netscape 1996 SSL 3.0 Specification November 1996. http://wp.netscape.com/eng/ssl3/ Neumann, B. C. and Ts'o, T. (1994): Kerberos: An Authentication Service for Computer Networks, IEEE Communications 32 [9], pp.33-38. http://gost.isi.edu/publications/kerberos-neuman-tso.html Orwell, G. (1949): Nineteen Eighty-Four, Chelsea House Publishers. Ozsoyoglu, G.; Singer, D. and Chung, S. (2003): Anti-Tamper Databases: Querying Encrypted Databases, Proceedings of the 17th Annual IFIP WG 11.3 Working Conference on Database and Applications Security,

Estes Park, Colorado

. P3P 2004 The Platform for Privacy Preferences 2004 July 8. http://www.w3.org/P3P/ PATRIOT (2001): Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (PATRIOT) Act, H.R.3162 in the United States Senate. http://www.epic.org/privacy/terrorism/hr3162.html PHC4 2002 Diabetes Hospitalization Report

Pittsburgh, PA

Pittsburgh Healthcare Cost Containment Council Nov. 2002. www.phc4.org/adobe/Diab01.pdf Rezgui, A.; Ouzzani, M.; Bouguettya, A. and Medjahed, B. (2002): Preserving Privacy in Web Services, Proceedings of the Workshop on Web Information and Data Management (WIDM '02),

McLean, VA

. http://www.se.cuhk.edu.hk/~eplim/widm2002/ Rindfleisch, T. C. (1997): Privacy, Information Technology and Healthcare, Communications of the ACM 40 [8], pp.92-100. Rivest, R.; Adleman, L. and Dertouzos, M. (1978): On Data Banks and Privacy Homomorphisms, Foundations of Secure Computation, Academic Press, New York. Rivest, R.; Shamir, A. and Adleman, L. (1978): A Method for Obtaining Digital Signatures and Public Key Cryptosystems, Communications of the ACM 21 [2], pp.120-126. http://dx.doi.org/10.1145/359340.359342 Rusch, J. J. 2004 The "Social Engineering" of Internet FraudUnited States Department of Justice2004 July 10. http://www.isoc.org/isoc/conferences/inet/99/proceedings/3g/3g_2.htm Schily, O. (2004): Wir leben in Zeiten epochaler Bedrohung, Interview in Frankfurter Allgemeine Sonntagszeitung, (March 21, 2004). Schneier, B. (1996): Applied Crypthography, 2. ed., John Wiley & Sons. Shannon, C. (1948): A mathematical theory of communication, Bell System Technical Journal 27, pp.379-423. Shoshani, A. (1982): Statistical databases: Characteristics, problems and some solutions, Proceedings of the 8th International Conference on Very Large Databases (VLDB '82),

Bombay, India

. Shoshani, A. (1997): OLAP and statistical databases: similarities and differences, Proceedings of the sixteenth ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems (PODS '97),

Tucson, Arizona

. http://classweb.gmu.edu/kersch/inft864/Readings/Shoshani/olap.vs.sdb.paper.PODS97.pdf Smith, S. W. and Weingart, S. H. (1999): Building a High-Performance, Programmable Secure Coprocessor, Computer Networks, Special Issue on Computer Network Security 31 [9], pp.831-860. http://portal.acm.org/citation.cfm?id=324128&dl=ACM&coll=portal Song, Dawn Xiaodong; Wagner, David and Perrig, Adrian (2000): Practical Techniques for Searches on Encrypted Data, Proceedings of the IEEE Symposium on Security and Privacy,

Oakland, CA

. Spiekermann, S.; Grossklags, J. and Berendt, B. (2001): E-privacy in 2nd generation E-commerce: privacy preferences versus actual behavior, Proceedings of the 3rd ACM conference on Electronic Commerce (ACM-EC '01),

Tampa, FL

. Stallings, W. (1999): Cryptography and Network Security: Principles and Practice, Prentice Hall. Sweeney, L. (2001): Computational Disclosure Control: A Primer on Data Privacy Protection, Massachusetts Institute of Technology. Sweeney, L. (2002): Achieving k-Anonymity Privacy Protection Using Generalization and Suppression, International Journal on Uncertainty, Fuzziness and Knowledge-based Systems 10 [5], pp.571-588. Sweeney, L. (2002): k-anonymity: A model for protecting privacy, International Journal on Uncertainty, Fuzziness and Knowledge-based Systems 10 [5], pp.557-570. Tamm, G. (2003): Netzbasierte Dienste - Angebot, Nachfrage und Matching, Dissertation, Humboldt Universität zu Berlin. http://edoc.hu-berlin.de/abstract.php3/dissertationen/tamm-gerrit-2003-05-09 Tamm, G. and Günther, O. (2004): Webbasierte Dienste: Technologien, Märkte und Geschäftsmodelle, Springer Verlag. Teltzrow, M. and Kobsa, A. (2004): Impact of user privacy preferences on personalized systems, Karat, C.-M.; Blom, J. and Karat, J., Eds, Designing Personalized User Experiences for eCommerce, Kluwer Academic Publishers,

Dordrecht, Netherlands

. Terdimann, R.; Apfel, A.; Paulak, E. and Berg, T. 2000 How hard will ASPs bite the IT IndustrySecondary Title: Strategic Analysis Report Nr. R-12-6618Garnter Group, Inc. Time (1997): The death of privacy, Time Magazine, August 25, 1997. Traub, J. F.; Yemini, Y. and Woznaikowski, H. (1984): The statistical security of a statistical database, ACM Transactions on Database Systems (TODS) 9 [4], pp.672-679. USPA 1974 The Privacy Act of 1974; Secondary Title: 5 U.S.C. § 552a; Tertiary Title: United States Congress. . http://www.usdoj.gov/foia/privstat.htm Vaidya, J. and Clifton, C. (2002): A security mediator for health care information, Proceedings of the ACM Conference on Knowledge Discovery and Data Mining (SIGKDD 2002),

Edmonton, Alberta

. W3C 1997 Hypertext Transfer Protocol -- HTTP/1.1. World Wide Web Consortium January 1997 . http://www.w3.org/Protocols/rfc2068/rfc2068 W3C 2004 Web Services Architecture RequirementsWorld Wide Web Consortium February 11, 2004. http://www.w3.org/TR/2004/NOTE-wsa-reqs-20040211/ Warren, S. and Brandeis, L. D. (1890): The right to privacy, Harvard Law Review IV [5]. Wiederhold, G. (1993): Intelligent Integration of Information, Proceedings of the ACM Conference on Management of Data (SIGMOD 1993),

Washington, D.C.

. Wiederhold, G.; Bilello, M.; Sarathy, V. and Qian, X. (1996): A Security Mediator for Health Care Information, Proceedings of the 1996 AMIA Conference,

Washington, D.C.

. Willenborg, L. and Waal, T. de (2001): Elements of Statistical Disclosure Control, Addison Wesley. Winkler, W. 2002 Single ranking micro-aggregation and re-identification; Secondary Title: Statistical Research Division report RR 2002/08. www.census.gov/srd/www/byyear.html Winston, W. L. (1991): Introduction to mathematical programming: applications and algorithms, Duxbury Press.