Dear

Interesting issues. Security of data collected in Big Data database systems is currently a priority issue for the development of this technology of gathering and advanced information processing. Taking into account the dynamic development of Big Data database systems as well as building and developing these systems by various business entities, the importance of information security issues gathered in Big Data database systems is growing. In addition, the analysis of the risk of cybercriminal attacks on Big Data database systems is growing, and therefore information security management systems collected in Big Data database systems should be built and permanently improved. Every business entity that has built its Big Data database system should also have its own information security management system stored in Big Data database systems.

Best wishes

When you address threat against people you need a very clear prioritisation. What do you want to protect people against? Imagine a brilliant algorithm which decreases the risk of theft but increases the risk of death: nobody wants that, right?

Hence I recommend to define a hierarchy of threats: harm to life, harm to property, harm to reputation, harm to comfort for instance.

Statistical Institutes have a long history of protecting people. They have defined SDC, statistical disclosure control, look it up (wikipedia) , it may help you.

Let me give two examples of massive threats to people in the context of big data which the mere use of differential privacy overlooks:

-discrimination of people based on the value of one of their sensitive attributes (ethnic group, weight, religion, sexual preference, political preference, age, sex, etc). You don't need to know who this is completely to identify this discriminatory attribute.

Say a democratic government collects such attribute for a good purpose of more efficient medical treatment. Elections bring to power a new government deciding to put in jail people with a certain value a of attribute A.

This case exists. The founder of the French National Institute of statistics INSEE, René Carmille, protected a sensitive attribute of people and saved the life of millions, but he was sent to his death after being tortured by Nazi Police in Occupied France in the 1940s. (see Wikipedia for details)

-today's world is dangerous and ill-intentioned people want to harm large numbers of people at once. This is why the number of people in a place at a certain time in a certain location is a sensitive parameter, not to be disclosed.

Both examples above are not helped by differential privacy. They are sensitive attributes beyond simple privacy...

Summary recommendation:

-threat hierarchy and detailed model

-adversary model

-counter-measure (protection, defense/reaction to attack)

Agree with previous comments.