TY - JOUR AU - Stach, Christoph AU - Behringer, Michael AU - Bräcker, Julia AU - Gritti, Clémentine AU - Mitschang, Bernhard T1 - SMARTEN—A Sample-Based Approach towards Privacy-Friendly Data Refinement JO - Journal of Cybersecurity and Privacy Y1 - 2022/august VL - 2 IS - 3 SP - 606 EP - 628 M3 - https://doi.org/10.3390/jcp2030031 KW - privacy; data refinement; data cleansing; data transformation; human-in-the-loop U1 - 2624-800X N2 - Two factors are crucial for the effective operation of modern-day smart services: Initially, IoT-enabled technologies have to capture and combine huge amounts of data on data subjects. Then, all these data have to be processed exhaustively by means of techniques from the area of big data analytics. With regard to the latter, thorough data refinement in terms of data cleansing and data transformation is the decisive cornerstone. Studies show that data refinement reaches its full potential only by involving domain experts in the process. However, this means that these experts need full insight into the data in order to be able to identify and resolve any issues therein, e.g., by correcting or removing inaccurate, incorrect, or irrelevant data records. In particular for sensitive data (e.g., private data or confidential data), this poses a problem, since these data are thereby disclosed to third parties such as domain experts. To this end, we introduce SMARTEN\@, a sample-based approach towards privacy-friendly data refinement to smarten up big data analytics and smart services. SMARTEN applies a revised data refinement process that fully involves domain experts in data pre-processing but does not expose any sensitive data to them or any other third-party. To achieve this, domain experts obtain a representative sample of the entire data set that meets all privacy policies and confidentiality guidelines. Based on this sample, domain experts define data cleaning and transformation steps. Subsequently, these steps are converted into executable data refinement rules and applied to the entire data set. Domain experts can request further samples and define further rules until the data quality required for the intended use case is reached. Evaluation results confirm that our approach is effective in terms of both data quality and data privacy. ER -