Redundancy and information leakage in fine-grained access control

Proceedings of the ACM SIGMOD International Conference on Management of Data

Volumn , Issue , 2006, Pages 133-144

  Kabra, Govind ^a   Ramamurthy, Ravishankar ^b   Sudarshan, S ^c  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b MICROSOFT RESEARCH   (United States)

^c INDIAN INSTITUTE OF TECHNOLOGY BOMBAY   (India)

Author keywords

Fine grained access control; Information leakage; Query optimization; Redundancy

Indexed keywords

FINE-GRAINED ACCESS CONTROL; INFORMATION LEAKAGE; QUERY OPTIMIZATION;

DATABASE SYSTEMS; QUERY PROCESSING; REDUNDANCY; SERVERS; USER INTERFACES;

ACCESS CONTROL;

EID: 34250649785     PISSN: 07308078     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1142473.1142489     Document Type: Conference Paper

References (13)

1. R. Agrawal, P. Bird, T. Grandison, J. Kiernan, S. Logan, W. Rjaibi: Extending Relational Database Systems to Automatically Enforce Privacy Policies. In ICDE, pages 1013-1022, 2005.
2. A. Brodsky, C. Farkas, and S. Jajodia. Secure databases: Constraints, inference channels, and monitoring disclosures. IEEE Trans. on Knowl. and Data Engg., 12(6):900-919, 2000.
3. A.K Chandra and P.M Merlin, Optimal Implementation of conjunctive queries in relational databases. STOC, 1977
4. K. LeFevre, R. Agrawal, V. Ercegovac, R. Ramakrishnan, Y. Xu and D. DeWitt, Limiting disclosure in Hippocratic data-bases, In VLDB, 2004
5. G. Graefe, W. McKenna, The Volcano Optimizer Generator: Extensibility and Efficient Search, In ICDE, 1993
6. G. Graefe, The Cascades Optimization Framework, Data Engg. Bulletin, 1995
7. D. Litchfield, Web Application Disassembly with ODBC Error Messages, 2001, http://www.blackhat.com/presentations/win-usa-01/Litchfield/ BHWin01Litchfield.doc
8. A. Motro. An access authorization model for relational data-bases based on algebraic manipulation of view definitions. In ICDE, pages 339-347, 1989.
9. The Virtual Private Database in Oracle9ir2: An Oracle Technical White Paper http://otn.oracle.com/deploy/security/oracle9ir2/pdf/vpd9ir2twp.pdf.
10. New Security Features in Sybase Adaptive Server Enterprise. Sybase Technical White Paper, 2003.
11. S. Rizvi, A. Mendelzon, S. Sudarshan and P. Roy, Extending query rewriting techniques for fine-grained access control. In SIGMOD, 2004
12. A. Rosenthal and E. Sciore. Abstracting and Refining Authorization in SQL. In Secure Data Management (SDM) workshop, In VLDB, 2004.
13. M. Stonebraker and E. Wong. Access control in a relational database management system by query modification. In Procs of the ACM Annual Conference, pages 180-186, 1974.