De-Health: All your online health information are belong to us

Shouling Ji; Qinchen Gu; Haiqin Weng; Qianjun Liu; Pan Zhou; Jing Chen; Zhao Li; Raheem Beyah; Ting Wang

doi:10.1109/ICDE48307.2020.00143

De-Health: All your online health information are belong to us

Shouling Ji
, Qinchen Gu
, Haiqin Weng
, Qianjun Liu
, Pan Zhou
, Jing Chen
, Zhao Li
, Raheem Beyah
, Ting Wang

Computer Science

Zhejiang University
Georgia Institute of Technology
Ant Financial Service Group
HUST
Wuhan University
Alibaba Group Holding Ltd.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

16 Scopus citations

Abstract

In this paper, we study the privacy of online health data. We present a novel online health data De-Anonymization (DA) framework, named De-Health. Leveraging two real world online health datasets WebMD and HealthBoards, we validate the DA efficacy of De-Health. We also present a linkage attack framework which can link online health/medical information to real world people. Through a proof-of-concept attack, we link 347 out of 2805 WebMD users to real world people, and find the full names, medical/health information, birthdates, phone numbers, and other sensitive information for most of the re-identified users. This clearly illustrates the fragility of the privacy of those who use online health forums.

Original language	English
Title of host publication	Proceedings - 2020 IEEE 36th International Conference on Data Engineering, ICDE 2020
Publisher	IEEE Computer Society
Pages	1609-1620
Number of pages	12
ISBN (Electronic)	9781728129037
DOIs	https://doi.org/10.1109/ICDE48307.2020.00143
State	Published - Apr 2020
Event	36th IEEE International Conference on Data Engineering, ICDE 2020 - Dallas, United States Duration: Apr 20 2020 → Apr 24 2020

Publication series

Name	Proceedings - International Conference on Data Engineering
Volume	2020-April
ISSN (Print)	1084-4627

Conference

Conference	36th IEEE International Conference on Data Engineering, ICDE 2020
Country/Territory	United States
City	Dallas
Period	04/20/20 → 04/24/20

Access to Document

10.1109/ICDE48307.2020.00143

Cite this

Ji, S., Gu, Q., Weng, H., Liu, Q., Zhou, P., Chen, J., Li, Z., Beyah, R., & Wang, T. (2020). De-Health: All your online health information are belong to us. In Proceedings - 2020 IEEE 36th International Conference on Data Engineering, ICDE 2020 (pp. 1609-1620). Article 9101713 (Proceedings - International Conference on Data Engineering; Vol. 2020-April). IEEE Computer Society. https://doi.org/10.1109/ICDE48307.2020.00143

@inproceedings{2854ab1edcd34c8dbadcc6134750d9b4,

title = "De-Health: All your online health information are belong to us",

abstract = "In this paper, we study the privacy of online health data. We present a novel online health data De-Anonymization (DA) framework, named De-Health. Leveraging two real world online health datasets WebMD and HealthBoards, we validate the DA efficacy of De-Health. We also present a linkage attack framework which can link online health/medical information to real world people. Through a proof-of-concept attack, we link 347 out of 2805 WebMD users to real world people, and find the full names, medical/health information, birthdates, phone numbers, and other sensitive information for most of the re-identified users. This clearly illustrates the fragility of the privacy of those who use online health forums.",

author = "Shouling Ji and Qinchen Gu and Haiqin Weng and Qianjun Liu and Pan Zhou and Jing Chen and Zhao Li and Raheem Beyah and Ting Wang",

note = "Publisher Copyright: {\textcopyright} 2020 IEEE.; 36th IEEE International Conference on Data Engineering, ICDE 2020 ; Conference date: 20-04-2020 Through 24-04-2020",

year = "2020",

month = apr,

doi = "10.1109/ICDE48307.2020.00143",

language = "English",

series = "Proceedings - International Conference on Data Engineering",

publisher = "IEEE Computer Society",

pages = "1609--1620",

booktitle = "Proceedings - 2020 IEEE 36th International Conference on Data Engineering, ICDE 2020",

}

Ji, S, Gu, Q, Weng, H, Liu, Q, Zhou, P, Chen, J, Li, Z, Beyah, R & Wang, T 2020, De-Health: All your online health information are belong to us. in Proceedings - 2020 IEEE 36th International Conference on Data Engineering, ICDE 2020., 9101713, Proceedings - International Conference on Data Engineering, vol. 2020-April, IEEE Computer Society, pp. 1609-1620, 36th IEEE International Conference on Data Engineering, ICDE 2020, Dallas, United States, 04/20/20. https://doi.org/10.1109/ICDE48307.2020.00143

De-Health: All your online health information are belong to us. / Ji, Shouling; Gu, Qinchen; Weng, Haiqin et al.
Proceedings - 2020 IEEE 36th International Conference on Data Engineering, ICDE 2020. IEEE Computer Society, 2020. p. 1609-1620 9101713 (Proceedings - International Conference on Data Engineering; Vol. 2020-April).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - De-Health

T2 - 36th IEEE International Conference on Data Engineering, ICDE 2020

AU - Ji, Shouling

AU - Gu, Qinchen

AU - Weng, Haiqin

AU - Liu, Qianjun

AU - Zhou, Pan

AU - Chen, Jing

AU - Li, Zhao

AU - Beyah, Raheem

AU - Wang, Ting

PY - 2020/4

Y1 - 2020/4

N2 - In this paper, we study the privacy of online health data. We present a novel online health data De-Anonymization (DA) framework, named De-Health. Leveraging two real world online health datasets WebMD and HealthBoards, we validate the DA efficacy of De-Health. We also present a linkage attack framework which can link online health/medical information to real world people. Through a proof-of-concept attack, we link 347 out of 2805 WebMD users to real world people, and find the full names, medical/health information, birthdates, phone numbers, and other sensitive information for most of the re-identified users. This clearly illustrates the fragility of the privacy of those who use online health forums.

AB - In this paper, we study the privacy of online health data. We present a novel online health data De-Anonymization (DA) framework, named De-Health. Leveraging two real world online health datasets WebMD and HealthBoards, we validate the DA efficacy of De-Health. We also present a linkage attack framework which can link online health/medical information to real world people. Through a proof-of-concept attack, we link 347 out of 2805 WebMD users to real world people, and find the full names, medical/health information, birthdates, phone numbers, and other sensitive information for most of the re-identified users. This clearly illustrates the fragility of the privacy of those who use online health forums.

UR - https://www.scopus.com/pages/publications/85085865197

U2 - 10.1109/ICDE48307.2020.00143

DO - 10.1109/ICDE48307.2020.00143

M3 - Conference contribution

AN - SCOPUS:85085865197

T3 - Proceedings - International Conference on Data Engineering

SP - 1609

EP - 1620

BT - Proceedings - 2020 IEEE 36th International Conference on Data Engineering, ICDE 2020

PB - IEEE Computer Society

Y2 - 20 April 2020 through 24 April 2020

ER -

De-Health: All your online health information are belong to us

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this