Secure databases: constraints, inference channels, and monitoring disclosures

IEEE Transactions on Knowledge and Data Engineering

Volumn 12, Issue 6, 2000, Pages 900-919

  Brodsky, Alexander ^c   Farkas, Csilla ^b   Jajodia, Sushil ^a,c  

^a IEEE   (United States)

^b University of South Carolina   (United States)

^c George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLETENESS; DATA CONFIDENTIALITY; DECIDABILITY; DISCLOSURE INFERENCE ENGINE; DISCLOSURE MONITOR; INFERENCE CHANNELS; MULTILEVEL SECURITY; SOUNDNESS;

ALGORITHMS; COMMUNICATION CHANNELS (INFORMATION THEORY); CONSTRAINT THEORY; INFERENCE ENGINES; SECURITY OF DATA; THEOREM PROVING;

DATABASE SYSTEMS;

EID: 0034314077     PISSN: 10414347     EISSN: None     Source Type: Journal    
DOI: 10.1109/69.895801     Document Type: Article

References (19)

1. A. Brodsky, C. Farkas, and S. Jajodia, "Data Disclosure and Inference Channels," technical report, George Mason Univ., 2000.
2. L.J. Buczkowski, "Database Inference Controller," Database Security III: Status and Prospects, D.L. Spooner and C. Landwehr, eds., pp. 311-322, 1990.
3. S. Dawson, S. De, C. di Vimercati, and P. Samarati, "Minimal Data Upgrating to Prevent Inference and Association Attacks," Proc. 18th ACM SIGMOD-SIGACT-SIGART Symp. Principles of Database Systems, pp. 114-125, 1999.
4. S. Dawson, S. De, C. di Vimercati, and P. Samarati, "Specification and Enforcement of Classification and Inference Constraints," Proc. IEEE Symp. Security and Privacy, 1999.
5. D.E. Denning, "Commutative Filters for Reducing Inference Threats in Multilevel Database Systems," Proc. IEEE Symp. Security and Privacy, pp. 134-146, 1985.
6. J.A. Goguen and J. Meseguer, "Unwinding and Inference Control," Proc. IEEE Symp. Security and Privacy, pp. 75-86, 1984.
7. T.H. Hinke, "Inference Aggregation Detection in Database Management Systems," Proc. IEEE Symp. Security and Privacy, pp. 96-106, 1988.
8. S. Jajodia and C. Meadows, "Inference Problems in Multilevel Secure Database Management Systems," Information Security: An Integrated Collection of Essays, M.D. Abrams, S. Jajodia, and H. Podell, eds., pp. 570-584, Los Alamitos, Cailf.: IEEE CS Press, 1995.
9. D.G. Marks, "Inference in MLS Database Systems," IEEE Trans. Knowledge and Data Eng., vol. 8, no. 1, pp. 46-55, Feb. 1996.
10. D.G. Marks, A. Motro, and S. Jajodia, "Enhancing the Controlled Disclosure of Sensitive Information," Proc. European Symp. Research in Computer Security, pp. 290-303, 1996.
11. S. Mazumdar, D. Stemple, and T. Sheard, "Resolving the Tension between Integrity and Security Using a Theorem Prover," Proc. ACM Int'l Conf. Management of Data, pp. 233-242, 1988.
12. C. Meadows, "Extending the Brewer-Nash Model to a Multilevel Context," Proc. IEEE Symp. Security and Privacy, pp. 95-102, 1990.
13. M. Morgenstern, "Controlling Logical Inference in Multilevel Database Systems," Proc. IEEE Symp. Security and Privacy, pp. 245-255, 1988.
14. G.W. Smith, "Modeling Security-Relevant Data Semantics," Proc. IEEE Symp. Research in Security and Privacy, pp. 384-391, 1990.
15. P.D. Stachour and B. Thuraisingham, "Design of LDV: A Multilevel Secure Relational Database Management System," IEEE Trans. Knowledge and Data Eng., vol. 2, no. 2, pp. 190-209, June 1990.
16. T. Su and G. Ozsoyoglu, "Inference in MLS Database Systems," IEEE Trans. Knowledge and Data Eng., vol. 3, no. 4, pp. 474-485, Dec. 1991.
17. T.H. Hinke, H.S. Delugach, and A. Chandrasekhar, "A Fast Algorithm for Detecting Second Paths in Database Inference Analysis," J. Computer Security, vol. 3, nos. 2 and 3, pp. 147-168, 1995.
18. B.M. Thuraisingham, "Security Checking in Relational Database Management Systems Augmented with Inference Engines," Computers and Security, vol. 6, pp. 479-492, 1987.
19. J.D. Ullman, Principles of Database and Knowledge-Base Systems, vols. 1 and 2. Rockville Md.: Computer Science Press, 1988.