Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
75 commits
Select commit Hold shift + click to select a range
b0d7abc
added README for MusCAT
froelich Apr 11, 2023
9f48e39
Update README.md
froelich Apr 11, 2023
6525513
Update README.md
froelich Apr 11, 2023
b077b37
Update README.md
froelich Apr 12, 2023
30ce190
renamed folder
froelich Apr 12, 2023
1f53e79
Update global readme with our project in the list
froelich Apr 13, 2023
4ccd017
Update README.md
froelich Apr 13, 2023
5d0aaaa
Update README.md
froelich Apr 13, 2023
fa0911b
Update README.md
hhcho Apr 17, 2023
8ee9f3b
Update README.md
hhcho Apr 17, 2023
4bb282b
Rename
hhcho Apr 17, 2023
ef77e85
updated affiliation
froelich Apr 18, 2023
c3cbe95
initial commit
RindalVisa Apr 20, 2023
4f8df8e
Create README.md
h-asif Apr 20, 2023
36171e9
Update README.md
h-asif Apr 20, 2023
84fb4ce
Merge pull request #42 from idsla/h-asif-patch-2
ngrayson1 May 1, 2023
2eef6c6
Merge pull request #39 from froelich/MusCAT-fed_secure_epidemic_surveil
ngrayson1 May 1, 2023
760a447
Merge pull request #41 from idsla/h-asif-patch-1
ngrayson1 May 1, 2023
89ef800
Create README.md
haobozhang May 1, 2023
a2a9bbe
Update README.md
haobozhang May 1, 2023
2ef91c8
Update README.md
haobozhang May 1, 2023
ffae9d1
Update README.md
haobozhang May 1, 2023
28a56cc
Add puffle to usnistgov/PrivacyEngCollabSpace
kenziyuliu May 1, 2023
93c1956
Merge branch 'master' into visa-pets-FL
RindalVisa May 2, 2023
7ad237c
Create README.md
steveng9 May 2, 2023
a1c63fd
Update README.md
steveng9 May 2, 2023
7481caf
Update README.md
steveng9 May 2, 2023
0a5d5ce
Merge pull request #45 from steveng9/PPMLHuskies
ngrayson1 May 5, 2023
25779bc
Merge pull request #43 from illidanlab/PET-prize-release-IllidanLab
ngrayson1 May 5, 2023
c7ad247
Merge pull request #40 from RindalVisa/visa-pets-FL
ngrayson1 May 5, 2023
e1a32fa
Merge branch 'master' into master
kenziyuliu May 5, 2023
2fe1e3e
Merge pull request #44 from kenziyuliu/master
ngrayson1 May 5, 2023
0d7c879
Add Privado Scan to tools
tuxology May 7, 2023
7127982
move README.md to the de-identification tools
haobozhang May 8, 2023
e1fa321
Update README.md
haobozhang May 8, 2023
94027ab
Merge pull request #47 from illidanlab/PET-prize-release-IllidanLab
ngrayson1 May 8, 2023
570ab55
Merge pull request #46 from Privado-Inc/privado-scan
ngrayson1 May 25, 2023
10705b0
NIST SP 800-226 Supplemental Material
davdar Dec 11, 2023
6aa7062
Merge pull request #49 from davdar/master
manderson11 Dec 11, 2023
2c922b1
Add files via upload
manderson11 Feb 5, 2024
34cf970
Update README.md
manderson11 Feb 5, 2024
840a20c
Add files via upload
manderson11 Feb 5, 2024
ac66501
Update README.md
manderson11 Feb 5, 2024
da0e7fc
Delete assets/MAanderson_Headshot.jpeg
manderson11 Feb 5, 2024
95a3e67
Add files via upload
manderson11 Feb 5, 2024
444d68c
Update README.md
manderson11 Feb 5, 2024
90ed390
Delete assets/meghan-anderson.jpeg
manderson11 Feb 5, 2024
849141e
Delete assets/NakiaGrayson.png
manderson11 Feb 5, 2024
1e15d94
Update README.md
manderson11 Feb 5, 2024
fa33403
Update CONTRIBUTING.md
manderson11 Feb 5, 2024
b927a78
Update README.md
manderson11 Feb 5, 2024
6378996
Update tool-template.md
manderson11 Feb 5, 2024
5646f5d
Update use-case-template.md
manderson11 Feb 5, 2024
a86d726
Add files via upload
manderson11 Feb 5, 2024
d35973f
Update README.md
manderson11 Feb 5, 2024
cf9be4c
Delete assets/nakia-grayson.jpeg
manderson11 Feb 5, 2024
653158b
Update README.md
manderson11 Feb 5, 2024
23b383e
Update README.md
manderson11 Feb 5, 2024
ac103ab
new folder for disassociability
ngrayson1 Feb 14, 2024
0e0722a
Create README.md
devjayati Mar 28, 2024
32afe3d
Update README.md
devjayati Mar 28, 2024
98986cc
Update README.md
devjayati Mar 28, 2024
c376475
Update README.md
devjayati Mar 29, 2024
4404780
Update README.md
devjayati Mar 29, 2024
2579d73
Merge pull request #51 from devjayati/comcast-map
manderson11 May 6, 2024
7e67b15
Update README.md
devjayati May 8, 2024
175a922
Create README.md
devjayati May 8, 2024
bb7f390
Delete tools/risk-assessment/Comcast-MAP directory
devjayati May 8, 2024
77bbecd
Merge pull request #52 from devjayati/patch-1
manderson11 May 8, 2024
b58f63d
Merge pull request #54 from devjayati/patch-2
manderson11 May 8, 2024
8941f04
Merge pull request #55 from devjayati/patch-3
manderson11 May 8, 2024
e891ea9
Add CARAF as a risk-assessment tool.
rtrimana Jun 9, 2025
1dfe818
Rename CARAF to Comcast-CARAF.
rtrimana Jun 9, 2025
9dcb2aa
Update README.md
rtrimana Jun 9, 2025
669d35b
Merge pull request #57 from rtrimana/master
manderson11 Aug 18, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,11 @@ NIST is accepting the following contributions.
**Feedback:** Help the community. Provide feedback on tools and use cases.

## Contribution Focus Areas
Please limit your contributions to the topics of de-identification or privacy risk assessment. We welcome [feedback](mailto:collabspace@nist.gov) on future topics of interest.
Please limit your contributions to the topics of disassociability or privacy risk assessment. We welcome [feedback](mailto:collabspace@nist.gov) on future topics of interest.

**De-identification:** a technique or process applied to a dataset with the goal of preventing or limiting certain types of privacy risks to individuals, protected groups, and establishments, while still allowing for the production of aggregate statistics. This focus area includes a broad scope of de-identification to allow for noise-introducing techniques such as differential privacy, data masking, and the creation of synthetic datasets that are based on privacy-preserving models.
**Disassociability:** This focus area can help system designers and engineers consider how to enable the processing of personal information or events without association to individuals or devices beyond the operational requirements of the system. These tools and use cases also support the achievement of the Dissociated Processing Subcategory (CT.DP.P) of the NIST Privacy Framework.

**Privacy Risk Assessment:** a process that helps organizations to analyze and assess privacy risks for individuals arising from the processing of their data. This focus area includes, but is not limited to, risk models, risk assessment methodologies, and approaches to determining privacy risk factors.
**Privacy Risk Assessment:** A process that helps organizations to analyze and assess privacy risks for individuals arising from the processing of their data. This focus area includes, but is not limited to, risk models, risk assessment methodologies, and approaches to determining privacy risk factors.

# How to Contribute

Expand All @@ -28,7 +28,7 @@ Tools and use cases are contributed via pull requests, while feedback is contrib

3. In your branch:

A. Create a new directory within the relevant tool or use case directory: tools/de-identification, tools/risk-assessment, use-cases/de-identification, or use-cases/risk-assessment. Example: *tools/de-identification/[your-contribution-name]*
A. Create a new directory within the relevant tool or use case directory: tools/disassociability, tools/risk-assessment, use-cases/disassociability, or use-cases/risk-assessment. Example: *tools/disassociability/[your-contribution-name]*

B. Name the directory to describe your contribution.

Expand Down
20 changes: 12 additions & 8 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@
The NIST Privacy Engineering Collaboration Space is an online venue open to the public where practitioners can discover, share, discuss, and improve upon open source tools, solutions, and processes that support privacy engineering and risk management.

## Focus Areas
We have launched this space with an initial focus on de-identification and privacy risk assessment tools and use cases, and welcome [feedback](mailto:collabspace@nist.gov) on topics of interest from the community.
We have launched this space with an initial focus on disassociability and privacy risk assessment tools and use cases, and welcome [feedback](mailto:collabspace@nist.gov) on topics of interest from the community.

* **De-identification:** a technique or process applied to a dataset with the goal of preventing or limiting certain types of privacy risks to individuals, protected groups, and establishments, while still allowing for the production of aggregate statistics. This focus area includes a broad scope of de-identification to allow for noise-introducing techniques such as differential privacy, data masking, and the creation of synthetic datasets that are based on privacy-preserving models.
* **Disassociability:** a technique or process applied to a dataset with the goal of preventing or limiting certain types of privacy risks to individuals, protected groups, and establishments, while still allowing for the production of aggregate statistics. This focus area includes a broad scope of disassociability to allow for noise-introducing techniques such as differential privacy, data masking, and the creation of synthetic datasets that are based on privacy-preserving models.

* **Privacy Risk Assessment:** a process that helps organizations to analyze and assess privacy risks for individuals arising from the processing of their data. This focus area includes, but is not limited to, risk models, risk assessment methodologies, and approaches to determining privacy risk factors.

Expand All @@ -26,7 +26,7 @@ Tools and use cases are contributed via pull requests, while feedback is contrib

3. In your branch:

A. Create a new directory within the relevant tool or use case directory: tools/de-identification, tools/risk-assessment, use-cases/de-identification, or use-cases/risk-assessment. Example: *tools/de-identification/[your-contribution-name]*
A. Create a new directory within the relevant tool or use case directory: tools/disassociability, tools/risk-assessment, use-cases/disassociability, or use-cases/risk-assessment. Example: *tools/disassociability/[your-contribution-name]*

B. Name the directory to describe your contribution.

Expand All @@ -52,7 +52,7 @@ Submit an [issue](https://github.com/usnistgov/PrivacyEngCollabSpace/issues/new)

## Browse Tools and Use Cases

Interested in tools or use cases for de-identification and privacy risk assessment? **Browse the contributions [here](https://www.nist.gov/itl/applied-cybersecurity/privacy-engineering/collaboration-space/browse).**
Interested in tools or use cases for disassociability and privacy risk assessment? **Browse the contributions [here](https://www.nist.gov/itl/applied-cybersecurity/privacy-engineering/collaboration-space/browse).**

## Operating Rules

Expand All @@ -78,7 +78,7 @@ This platform is provided as a public service. Information, data, and software p

## Moderators

### De-Identification Moderators
### Disassociability Moderators

![Joseph Near](https://github.com/usnistgov/PrivacyEngCollabSpace/blob/master/assets/joseph-near.jpg)

Expand All @@ -88,11 +88,15 @@ This platform is provided as a public service. Information, data, and software p

**David Darais [@davdar]:** David Darais is a Principal Scientist at Galois, Inc. and supports NIST as a moderator for the Privacy Engineering Collaboration Space. David's research focuses on tools for achieving reliable software in critical, security-sensitive, and privacy-sensitive systems. David received his B.S. from the University of Utah, M.S. from Harvard University and Ph.D. from the University of Maryland.

### Privacy Risk Management Moderator
### Privacy Risk Management Moderators

![Katie Boeckl](https://github.com/usnistgov/PrivacyEngCollabSpace/blob/master/assets/katie-boeckl.jpg)
![Nakia Grayson](https://github.com/usnistgov/PrivacyEngCollabSpace/blob/master/assets/nakia-grayson.jpg)

**Katie Boeckl [@kboeckl]:** Katie Boeckl is a privacy risk strategist at NIST. As part of the Privacy Engineering Program, Katie develops privacy risk management guidance, collaborates on the development of international privacy standards, and works to advance tools for privacy engineering and risk management. Katie has a B.A. in English from the University of Maryland, College Park, where she specialized in technology through a digital cultures honors program.
**Nakia Grayson [@ngrayson1]:** Nakia Grayson is an IT Security Specialist with the Privacy Engineering Program at the National Institute of Standards and Technology (NIST). She supports the Privacy Engineering Program with development of privacy risk management best practices, guidance and communications efforts. She also leads Supply Chain Assurance project efforts at the National Cybersecurity Center of Excellence (NCCoE). Nakia serves as the Contracting Officer Representative for NIST cybersecurity contracts. She holds a Bachelor’s in Criminal Justice from University of Maryland-Eastern Shore and a Master’s in Information Technology, Information Assurance and Business Administration from the University of Maryland University College.

![Meghan Anderson](https://github.com/usnistgov/PrivacyEngCollabSpace/blob/master/assets/meghan-anderson.jpg)

**Meghan Anderson [@manderson11]:** Meghan Anderson is a Privacy Risk Strategist with the Privacy Engineering Program at the National Institute of Standards and Technology, U.S. Department of Commerce. She supports the development of privacy engineering, international privacy standards, and privacy risk management guidance. Meghan has a Bachelor’s in Emergency Preparedness, Homeland Security, and Cybersecurity with a concentration in Cybersecurity and a minor in Economics from the University of Albany, SUNY and a Master’s in Cybersecurity from the Georgia Institute of Technology (Georgia Tech).

## NIST Privacy Engineering Program
Learn about NIST's Privacy Engineering Program by visiting our [website](https://www.nist.gov/itl/applied-cybersecurity/privacy-engineering).
Expand Down
Binary file added assets/meghan-anderson.jpg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added assets/nakia-grayson.jpg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
4 changes: 2 additions & 2 deletions templates/tool-template.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@

**Name of Tool:**

**Primary Focus Area (select one):** De-identification or Privacy Risk Assessment
**Primary Focus Area (select one):** Disassociability or Privacy Risk Assessment

**De-identification Keywords (select any relevant):** Differential Privacy, K-Anonymity, Anonymization, Access Control, Information Leakage, Algorithmic Fairness, Verification of Algorithms, Machine Learning, Database Queries, Synthetic Data Generation, Location Data, Adversarial Examples, Other/Propose New Keyword
**Disassociability Keywords (select any relevant):** Differential Privacy, K-Anonymity, Anonymization, Access Control, Information Leakage, Algorithmic Fairness, Verification of Algorithms, Machine Learning, Database Queries, Synthetic Data Generation, Location Data, Adversarial Examples, Other/Propose New Keyword

**Brief Description:**

Expand Down
4 changes: 2 additions & 2 deletions templates/use-case-template.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@

**Name of Use Case:**

**Primary Focus Area (select one):** De-identification or Privacy Risk Assessment
**Primary Focus Area (select one):** Disassociability or Privacy Risk Assessment

**De-identification Keywords (select any relevant):** Differential Privacy, K-Anonymity, Anonymization, Access Control, Information Leakage, Algorithmic Fairness, Verification of Algorithms, Machine Learning, Database Queries, Synthetic Data Generation, Location Data, Other/Propose New Keyword
**Disassociability Keywords (select any relevant):** Differential Privacy, K-Anonymity, Anonymization, Access Control, Information Leakage, Algorithmic Fairness, Verification of Algorithms, Machine Learning, Database Queries, Synthetic Data Generation, Location Data, Other/Propose New Keyword

**Brief Description:**

Expand Down
6 changes: 3 additions & 3 deletions tools/README.md
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
# Focus Areas
Tools and use cases are currently focused on de-identification and privacy risk assessment. We welcome [feedback](mailto:collabspace@nist.gov) on future topics of interest.
Tools and use cases are currently focused on disassociability and privacy risk assessment. We welcome [feedback](mailto:collabspace@nist.gov) on future topics of interest.

**De-identification:** a technique or process applied to a dataset with the goal of preventing or limiting certain types of privacy risks to individuals, protected groups, and establishments, while still allowing for the production of aggregate statistics. This focus area includes a broad scope of de-identification to allow for noise-introducing techniques such as differential privacy, data masking, and the creation of synthetic datasets that are based on privacy-preserving models.
**Disassociability:** This focus area can help system designers and engineers consider how to enable the processing of personal information or events without association to individuals or devices beyond the operational requirements of the system. These tools and use cases also support the achievement of the Dissociated Processing Subcategory (CT.DP.P) of the NIST Privacy Framework.

**Privacy Risk Assessment:** a process that helps organizations to analyze and assess privacy risks for individuals arising from the processing of their data. This focus area includes, but is not limited to, risk models, risk assessment methodologies, and approaches to determining privacy risk factors.
**Privacy Risk Assessment:** A process that helps organizations to analyze and assess privacy risks for individuals arising from the processing of their data. This focus area includes, but is not limited to, risk models, risk assessment methodologies, and approaches to determining privacy risk factors.

# Contribute Feedback

Expand Down
13 changes: 13 additions & 0 deletions tools/de-identification/HyFL-Framework/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
# HyFL Framework for anomaly detection in financial transactions.

- **Name of Tool:** HyFL framework for financial anomaly detection
- **Primary Focus Area:** De-identification
- **Privacy Risk Assessment Keywords:** Differential Privacy, Information Leakage, Anomaly Detection, Federated Learning, Encryption
- **Brief Desription:** The repository provides a framework HyFL as a tool to detect anomaly in financial transactions. This framework supporst a hybrid federated learning paradigm to offer secure and privacy-aware learning and inference for financial anomaly detection.
- **GitHub User Serving as POC:** hbzhang879@gmail.com
- **Affiliation/Organazations Contributing:**
- Illidan Lab, Michigan State University, USA
- DENOS Lab, University of Calgary, Canada

# For a Linked Tool
**Tool Link:** https://github.com/illidanlab/HyFL
18 changes: 18 additions & 0 deletions tools/de-identification/MusCAT/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# MusCAT

**Primary Focus Area (select one):** De-identification

**De-identification Keywords (select any relevant):** Differential Privacy, Multiparty Homomorphic Encryption, Machine Learning, Federated Learning

**Brief Description:**
MusCAT is a multi-scale, hybrid federated system for privacy-preserving epidemic surveillance and risk prediction.
It combines differential privacy, multiparty homomorphic encryption, and federated learning to jointly analyze private data held by multiple federation units with formal privacy guarantees.
This software implements Team MusCAT's solution to the [U.S. PETs Prize Challenge](https://www.drivendata.org/competitions/group/nist-federated-learning/) (Pandemic Forecasting).
Team MusCAT won [first place](https://drivendata.co/blog/federated-learning-pets-prize-winners-phase1) for the white paper (Phase 1) and [second place](https://drivendata.co/blog/federated-learning-pets-prize-winners-phases-2-3) in the final stage (Phase 2) of the Challenge.


**GitHub User Serving as POC (or Email Address):** @hhcho

**Affiliation/Organization(s) Contributing (if relevant):** Broad Institute, MIT, Harvard Business School, UT Austin, University of Toronto

**Tool Link:** https://github.com/hhcho/muscat
Loading