Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

NAME SEX AID FINES DRUGS DORM 5000 Chin 3000 Dewitt 20 West 1000 2000 1000 4000

ID: 3888603 • Letter: N

Question

NAME SEX AID FINES DRUGS DORM 5000 Chin 3000 Dewitt 20 West 1000 2000 1000 4000 5000 Grey Earhart F Fein 40 Holmes 10 West West 10 Holmes Hill Koch Liu West Grey Grey 2000 Majors 8. Refer again to Table 2 (above) for the following questions (4pts each). Again, assume you have no additional data to correlate to the table. Also assume that FINES can only be within 0 and 40, and that that fines are given in multiples of 10 (i.e only fines of value 10, 20, 30 and 40 are possible), Consider the following query "SHOW TOTAL OF FINES PER DORM" Does this query reveal any sensitive information or constitute a successful attack? Why or why not? A.

Explanation / Answer

A. "SHOW TOTAL OF FINES PER DORM"

This query doesn't reveal any sensitive information and it doesn't constitute as a successful attack. All this query can provide is the cumulative of fines per each dorms. This alone doesn't reveal any clue about the personal information of the residents.

B. "TOTAL OF FINES PER DORM, PER SEX"

Holmes, Male, 80
Homes, Females, 10
Grey, Male, 30
Grey, Female, 10
West, Male, 0
West, Female, 30

The above data only provides the statistical gender related information. Since the fines are multiples of 10, we can be sure of the following information. This can be considered as a partially successful attack and it still doesn't reveal any higly sesitive information as there is no other data to correlate it with.
- Holmes Hall has atleast 2 males and 1 female residents
            - Grey Hall has atleast 1 male and 1 female residents.
            - West Hall has atleast 1 female residents, but cannot be sure about male residents

C. query in (B) + count of records by dorm, by sex
The new query gives the exact count of male and female students per each dorm. Now if we relate it with the information obtained in part(B), we can get the extract amount of fines of some of the resident along with their dormitory and gender information (But not their identity). This can be considered as a partially successful attack as some of the sensitive statistics (gender related) has been revealed.

Holmes, Male, 2
Homes, Females, 1
Grey, Male, 3
Grey, Female, 1
West, Male, 1
West, Female, 3

We can deduce the following information from the data obtained in (B) and (C).
- Holmes has exactly one female student with a fine of 10$
- Holmes has two male students, each with fine of (80/2) = 40. This is because maximum amount that can be fined is 40.
- Grey hall has 1 female student with a fine of 10$.
- Grey hall has 3 male students, and atleast one of them has been fined.
- West hall has 1 male with 0$ fine.
- West hall has 3 females with atleast one of them has been fined.