document: On anonymizing query logs via token-based hashing In this paper we study the privacy preservation properties of aspecific technique for query log anonymization : token-based hashing . In this approach , each query is tokenized , and then a secure hash function is applied to each token . We show that statistical techniques may be applied to partially compromise the anonymization . We then analyze the specific risks that arise from these partial compromises , focused on revelation of identity from unambiguous names , addresses , and so forth , and the revelation of facts associated with an identity that are deemed to be highly sensitive . Our goal in this work is two fold : to show that token-based hashing is unsuitable for anonymization , and to present a concrete analysis of specific techniques that may be effective in breaching privacy , against which other anonymization schemes should be measured .
doc_bio_tags: O O B I O O O O O O O O O B O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O B O O O O O O O O O O