Confidentiality policies for controlled query evaluation

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4602 LNCS, Issue , 2007, Pages 1-13

  Biskup, Joachim ^a   Weibert, Torben ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

Confidentiality policies; Inference control; Logic databases

Indexed keywords

DATABASE SYSTEMS; INFORMATION SYSTEMS; USER INTERFACES; QUERY PROCESSING; SEMANTICS;

CONFIDENTIALITY POLICIES; CONTROLLED QUERY EVALUATION (CQE); INFERENCE CONTROL; QUERY EVALUATION; FORMAL DEFINITION; RUNTIMES;

QUERY PROCESSING; SEARCH ENGINES;

EID: 37849036071     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-73538-0_1     Document Type: Conference Paper

References (24)

1. Castano, S., Fugini, M., Martella, G., Samarati, P.: Database Security. ACM Press, New York (1995)
2. Denning, D.: Cryptography and Data Security. Addison-Wesley, London, UK (1982)
3. Leiss, E.L.: Principles of Data Security. Plenum Press, New York (1982)
4. Domingo-Ferrer, J. (ed.): Inference Control in Statistical Databases. In: Domingo-Ferrer, J. (ed.) Inference Control in Statistical Databases. LNCS, vol. 2316, Springer, Heidelberg (2002)
5. Wang, L., Jajodia, S., Wijesekera, D.: Securing OLAP data cubes against privacy breaches. In: IEEE Symposium on Security and Privacy, pp. 161-178. IEEE Computer Society, Los Alamitos (2004)
6. Wang, L., Li, Y., Wijesekera, D., Jajodia, S.: Precisely answering multi-dimensional range queries without privacy breaches. In: Snekkenes, E., Gollmann, D. (eds.) ESORICS 2003. LNCS, vol. 2808, Springer, Heidelberg (2003)
7. Brodsky, A., Farkas, C., Jajodia, S.: Secure databases: Constraints, inference channels, and monitoring disclosures. IEEE Transactions on Knowledge and Data Engineering 12(6), 900-919 (2000)
8. Lunt, T.F., Denning, D.E., Schell, R.R., Heckman, M., Shockley, W.R.: The seaview security model. IEEE Transactions on Software Engineering 16(6), 593-607 (1990)
9. Qian, X., Lunt, T.F.: A semantic framework of the multilevel secure relational model. IEEE Transactions on Knowledge and Data Engineering 9(2), 292-301 (1997)
10. Staddon, J.: Dynamic inference control. In: 8th ACM SIGMOD Workshop on Research Issues in Data Mining and Knowledge Discovery, pp. 94-100 (2003)
11. Winslett, M., Smith, K., Qian, X.: Formal query languages for secure relational databases. ACM Transactions on Database Systems 19(4), 626-662 (1994)
12. Farkas, C., Jajodia, S.: The inference problem: A survey. SIGKDD Explorations 4(2), 6-11 (2002)
13. Sicherman, G.L., de Jonge, W., van de Riet, R.P.: Answering queries without revealing secrets. ACM Transactions on Database Systems 8(1), 41-59 (1983)
14. Bonatti, P.A., Kraus, S., Subrahmanian, V.: Foundations of secure deductive databases. IEEE Transactions on Knowledge and Data Engineering 7(3), 406-422 (1995)
15. Biskup, J.: For unknown secrecies refusal is better than lying. Data & Knowledge Engineering 33, 1-23 (2000)
16. Biskup, J., Bonatti, P.A.: Controlled query evaluation with open queries for a decidable relational submodel. In: Dix, J., Hegner, S.J. (eds.) FoIKS 2006. LNCS, vol. 3861, pp. 43-62. Springer, Heidelberg (2006)
17. Biskup, J., Bonatti, P.A.: Lying versus refusal for known potential secrets. Data & Knowledge Engineering 38, 199-222 (2001)
18. Biskup, J., Bonatti, P.A.: Controlled query evaluation for enforcing confidentiality in complete information systems. International Journal of Information Security 3, 14-27 (2004)
19. Biskup, J., Bonatti, P.A.: Controlled query evaluation for known policies by combining lying and refusal. Annals of Mathematics and Artificial Intelligence 40, 37-62 (2004)
20. Biskup, J., Weibert, T.: Refusal in incomplete databases. In: Research Directions in Data and Applications Security XVIII, pp. 143-157 Kluwer/Springer (2004)
21. Biskup, J., Weibert, T.: Keeping secrets in incomplete databases. Submitted, 2007. Extended abstract presented at the LICS'05 Affiliated Workshop on Foundations of Computer Security (FCS'05), available from http://www.es.Chalmers.se/andrei/FCS05/fcs05.pdf (2005)
22. Fagin, R., Halpern, J.Y., Moses, Y., Vardi, M.Y.: Reasoning About Knowledge. MIT Press, Cambridge (1995)
23. University of Dortmund, Information Systems and Security: CQE prototype implementation. http://ls6-www.cs.uni-dortmund.de/issi/projects/cqe/
24. Winslett, M.: An introduction to trust negotiation. In: Nixon, P., Terzis, S. (eds.) iTrust 2003. LNCS, vol. 2692, pp. 275-283. Springer, Heidelberg (2003)