Maximizing sharing of protected information

Journal of Computer and System Sciences

Volumn 64, Issue 3, 2002, Pages 496-541

  Dawson, Steven ^a   De Vimercati, Sabrina Capitani Di ^b   Lincoln, Patrick ^a   Samarati, Pierangela ^c  

^a SRI INTERNATIONAL   (United States)

^b UNIVERSITY OF BRESCIA   (Italy)

^c UNIVERSITY OF MILAN   (Italy)

Author keywords

Constraint solving; Data classification; Data inference; Lattice; Privacy; Security

Indexed keywords

ALGORITHMS; CONSTRAINT THEORY; COSTS; DATA ACQUISITION; DATA DESCRIPTION; INFORMATION ANALYSIS; LATTICE CONSTANTS; PROBLEM SOLVING; SECURITY OF DATA;

CONSTRAINT SOLVING; DATA CLASSIFICATION; DATA INFERENCE; INFORMATION VISBILITY;

DATABASE SYSTEMS;

EID: 3042717763     PISSN: 00220000     EISSN: None     Source Type: Journal    
DOI: 10.1006/jcss.2001.1807     Document Type: Conference Paper

References (38)

1. H. Aït-Kaci, R. Boyer, P. Lincoln, and R. Nasr, Efficient implementation of lattice operations, ACM Trans. Program. Lang. Systems 11 (1989), 115-146.
2. D. E. Bell and L. J. LaPadula, Secure computer systems: Unified exposition and Multics interpretation, Technical report, The Mitre Corporation, March 1976.
3. S. Castano, M. G. Fugini, G. Martella, and P. Samarati, "Database Security," Addison-Wesley, Reading, MA, 1995.
4. T. H. Cormen, C. E. Leiserson, and R. L. Rivest, "Introduction to Algorithms," McGraw-Hill, New York, 1990.
5. S. Dawson, S. De Capitani di Vimercati, P. Lincoln, and P. Samarati, Minimal data upgrading to prevent inference and association attacks, in "Proc. of the 18th ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS)," Philadelphia, PA, May 31-June 3, 1999.
6. S. Dawson, S. De Capitani di Vimercati, and P. Samarati, Specification and enforcement of classification and inference constraints, in "Proc. of the 20th IEEE Symposium on Security and Privacy," pp. 181-195, Oakland, CA, May 1999.
7. H. S. Delugach and T. H. Hinke, Wizard: A database inference analysis and detection system, IEEE Trans. Knowledge Data Engrg. 8 (1996), 56-66.
8. Department of Defense, National Computer Security Center, "Department of Defense Trusted Computer System Evaluation Criteria," Standard DOD 5200.28-STD, 1985.
9. D. D. Ganguly, C. K. Mohan, and S. Ranka, A space-and-time-efficient coding algorithm for lattice computations, IEEE Trans. Knowledge Data Engrg. 6 (1994), 819-829.
10. J. T. Haigh, R. C. O'Brien, and D. J. Thomsen, The LDV secure relational DBMS model, in "Database Security, IV: Status and Prospects" (S. Jajodia and C. E. Landwehr, Eds.), pp. 265-279, North-Holland, Amsterdam, 1991.
11. J. Hale and S. Shenoi, Catalytic inference analysis: Detecting inference threats due to knowledge discovery, in "Proc. of the 1997 IEEE Symposium on Security and Privacy," pp. 188-199, Oakland, CA, May 1997.
12. T. Hinke, Inference aggregation detection in database management systems, in "Proc. of the IEEE Symposium on Research in Security and Privacy, " pp. 96-107, Oakland, CA, April 1988.
13. S. Jajodia and C. Meadows, Inference problems in multilevel secure database management systems, in "Information Security - An Integrated Collection of Essays" (M. D. Abrams, S. Jajodia, and H. J. Podell, Eds.), pp. 570-584, IEEE Computer Society Press, Los Alamitos, CA, 1995.
14. S. Jajodia and R. Sandhu, Toward a multilevel secure relational data model, in "Proc. of the 1991 ACM SIGMOD Conference," pp. 50-59, May 1991.
15. T. F. Lunt, Aggregation and inference: Facts and fallacies, in "Proc. of the IEEE Symposium on Security and Privacy," pp. 102-109, Oakland, CA, May 1989.
16. T. F. Lunt, D. E. Denning, R. R. Schell, M. Heckman, and W. R. Shockley, The SeaView security model, IEEE Trans. Software Engrg. 16 (1990), 593-607.
17. D. G. Marks, Inference in MLS database systems, IEEE Trans. Knowledge Data Engrg. 8 (1996), 46-55.
18. C. Meadows, Extending the Brewer-Nash model to a multilevel context, in "Proc. of the 1990 IEEE Symposium on Research in Security and Privacy," pp. 95-102, Oakland, CA, May 1990.
19. J. K. Millen, Models of multilevel computer security, Technical Report MTR-10537, The Mitre Corporation, 1989. Also in Adv. Comput. 29 (1989), 1-45.
20. J. K. Millen, Models of multilevel computer security, Technical Report MTR-10537, The Mitre Corporation, 1989. Also in Adv. Comput. 29 (1989), 1-45.
21. M. Morgenstern, Security and inference in multilevel database and knowledge-base systems, in "Proc. of the 1987 ACM SIGMOD Conference," pp. 357-373, San Francisco, CA, May 1987.
22. A. Motro, D. G. Marks, and S. Jajodia, Enhancing the controlled disclosure of sensitive information, in "Proc. of the Fourth European Symposium on Research in Security and Privacy," pp. 290-303, Rome, Italy, September 1996.
23. V. R. Pratt and J. Tiuryn, Satisfiability of inequalities in a poset, Fund. Inform. 28 (1996), 165-182.
24. X. Qian and T. F. Lunt, A MAC policy framework for multilevel relational databases, IEEE Trans. Knowledge Data Engrg. 8 (1996), 1-14.
25. X. Qian, M. E. Stickel, P. D. Karp, T. F. Lunt, and T. D. Garvey, Detection and elimination of inference channels in multilevel relational databases, in "Proc. of the 1993 IEEE Symposium on Research in Security and Privacy," pp. 196-205, Oakland, CA, May 1993.
26. P. Samarati and S. De Capitani di Vimercati, Access control: Policies, models, and mechanisms, in "Foundations of Security Analysis and Design" (R. Focardi and R. Gorrieri, Eds.), Lecture Notes of Computer Science 2171, Springer-Verlag, Berlin, 2001.
27. R. Sandhu and F. Chen, The multilevel relational (MLR) data model, ACM Trans. Inform. System Security 1 (1998), 93-132.
28. G. L. Sicherman, W. de Jonge, and R. P. van de Riet, Answering queries without revealing secrets, ACM Trans. Database System 8 (1983), 41-59.
29. G. W. Smith, Modeling security-relevant data semantics, in "Proc. of the 1990 IEEE Symposium on Research in Security and Privacy," pp. 384-391, Oakland, CA, May 1990.
30. M. E. Stickel, Elimination of inference channels by optimal upgrading, in "Proc. of the 1994 IEEE Symposium on Research in Security and Privacy," pp. 168-174, Oakland, CA, May 1994.
31. T. A. Su and G. Ozsoyoglu, Controlling FD and MVD inferences in multilevel relational database systems, IEEE Trans. Knowledge Data Engrg. 3 (1991), 474-485.
32. M. Talamo and P. Vocca, A data structure for lattice representation, Theoret. Comput. Sci. 175 (1997), 373-392.
33. R. Tarjan, Depth-first search and linear graph algorithms, SIAM J. Comput. 1 (1972), 146-160.
34. B. Thuraisingham, The use of conceptual structures for handling the inference problem, in "Database Security, V: Status and Prospects" (C. E. Landwehr and S. Jajodia, Eds.), pp. 333-362, North-Holland, Amsterdam, 1992.
35. B. Thuraisingham and W. Ford, Security constraint processing in a multilevel secure distributed database management system, IEEE Trans. Knowledge Data Engrg. 7 (1995), 274-293.
36. G. Wiederhold and M. Genesereth, The conceptual basis for mediation services, IEEE Expert 12 (1997), 38-47.
37. M. Winslett, K. Smith, and X. Qian, Formal query languages for secure relational databases, ACM Trans. Database Systems 19 (1994), 626-662.
38. R. W. Yip and K. N. Levitt, Data level inference detection in database systems, in "Proc. of the 11th IEEE Computer Security Foundations Workshop," Rockport, MA, pp. 179-189, June 1998.