Controlled query evaluation for known policies by combining lying and refusal

Annals of Mathematics and Artificial Intelligence

Volumn 40, Issue 1-2, 2004, Pages 37-62

  Biskup, Joachim ^a   Bonatti, Piero A ^b  

^a TU DORTMUND UNIVERSITY   (Germany)

^b UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

Controlled query evaluation; Inference control; Lying; Potential secret; Refusal; Reliability; Secrecy; User log

Indexed keywords

EID: 0347756656     PISSN: 10122443     EISSN: None     Source Type: Journal    
DOI: 10.1023/A:1026106029043     Document Type: Conference Paper

References (11)

1. J. Biskup, For unknown secrecies refusal is better than lying, Data and Knowledge Engineering 33 (2000) 1-23.
2. J. Biskup and P.A. Bonatti, Lying versus refusal for known potential secrets, Data and Knowledge Engineering 38 (2001) 199-222.
3. J. Biskup and P.A. Bonatti, Confidentiality policies and their enforcement for controlled query evaluation, in: Proc. of ESORICS 2002, Lecture Notes in Computer Science, Vol. 2502 (Springer, New York, 2002) pp. 39-54.
4. P.A. Bonatti, S. Kraus and V.S. Subrahmanian, Foundations of secure deductive databases, IEEE Transactions on Knowledge and Data Engineering 7(3) (1995) 406-422.
5. S. Dawson, S. De Capitani di Vimercati, P. Lincoln and P. Samarati, Minimal data upgrading to prevent inference and association attacks, in: Proc. of the 18th ACM-SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS) (1999) pp. 114-125.
6. J.W. Lloyd, Foundations of Logic Programming (Springer, Berlin, 1987).
7. X. Quian, View-based access control with high assurance, in: Proc. of the 1996 IEEE Symposium on Security and Privacy (1996) pp. 85-93.
8. J.R. Shoenfield, Mathematical Logic (Addison-Wesley, Reading, MA, 1967).
9. G.L. Sicherman, W. de Jonge and R.P. van de Riet, Answering queries without revealing secrets, ACM Transactions on Database Systems 8(1) (1983) 41-59.
10. M.E. Stickel, Elimination of inference channels by optimal upgrading, in: Proc. of the 1994 IEEE Symposium on Security and Privacy (1994) pp. 168-174.
11. T.A. Su and G. Ozsoyoglu, Controlling FD and MVD inferences in multilevel relational database systems, IEEE Transactions on Knowledge and Data Engineering 3(4) (1991) 474-485.