Keeping secrets in incomplete databases

International Journal of Information Security

Volumn 7, Issue 3, 2008, Pages 199-217

  Biskup, Joachim ^a   Weibert, Torben ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

Controlled query evaluation; Incomplete databases; Inference control; Information systems

Indexed keywords

DATABASE SYSTEMS; INFERENCE ENGINES; LOGIC DESIGN; QUERY PROCESSING;

CONFIDENTIALITY-PRESERVING MECHANISMS; CONTROLLED QUERY EVALUATION (CQE); DISTORTION METHOD; LOGIC DATABASES;

INFORMATION SYSTEMS;

EID: 44249126774     PISSN: 16155262     EISSN: 16155270     Source Type: Journal    
DOI: 10.1007/s10207-007-0037-7     Document Type: Article

References (21)

1. Biskup J. (2000). For unknown secrecies refusal is better than lying. Data and Know. Eng. 33: 1-23
2. Biskup J. and Bonatti P.A. (2001). Lying versus refusal for known potential secrets. Data Knowl. Eng. 38: 199-222
3. Biskup J. and Bonatti P.A. (2004). Controlled query evaluation for enforcing confidentiality in complete information systems. Int. J. Inf. Security 3: 14-27
4. Biskup J. and Bonatti P.A. (2004). Controlled query evaluation for known policies by combining lying and refusal. Ann. Mathe. Artifi. Intell. 40: 37-62
5. Biskup, J., Bonatti, P.A.: Controlled query evaluation with open queries for a decidable relational submodel. In: Dix, J., Hegner, S.J. (eds.) FoIKS, Lecture Notes in Computer Science, vol. 3861, pp. 43-62. Springer (2006)
6. Biskup, J., Weibert, T.: Refusal in incomplete databases. In: Farkas, C., Samarati, P. (eds.) Research Directions in Data and Applications Security XVIII, vol. 144, pp. 143-157. Kluwer/Springer (2004)
7. Biskup, J., Weibert, T.: Confidentiality policies for controlled query evaluation. In: Barker, S., Ahn, G.-J. (eds) 21st Annual IFIP WG 11.3 Working Conference on Applications and Data Security, Lecture Notes in Computer Science, vol. 4602, pp. 1-13, Springer (2007)
8. Bonatti P.A., Kraus S. and Subrahmanian V. (1995). Foundations of secure deductive databases. IEEE Trans. Knowl. Data Eng. 7(3): 406-422
9. Brodsky A., Farkas C. and Jajodia S. (2000). Secure databases: constraints, inference channels, and monitoring disclosures. IEEE Trans. Knowl.Data Eng. 12(6): 900-919
10. Castano, S., Fugini, M., Martella, G., Samarati, P.: Database Security. ACM Press (1995)
11. Denning, D.: Cryptography and Data Security. Addison-Wesley (1982)
12. Fagin, R., Halpern, J.Y., Moses, Y., Vardi, M.Y.: Reasoning About Knowledge. MIT Press (1995)
13. Farkas C. and Jajodia S. (2002). The inference problem: A survey. SIGKDD Explorations 4(2): 6-11
14. Leiss, E.L.: Principles of Data Security. Plenum Press (1982)
15. Lunt T.F., Denning D.E., Schell R.R., Heckman M. and Shockley W.R. (1990). The seaview security model. IEEE Trans. Softw. Eng. 16(6): 593-607
16. Qian X. and Lunt T.F. (1997). A semantic framework of the multilevel secure relational model. IEEE Trans. Knowl. Data Eng. 9(2): 292-301
17. Sicherman, G.L., de Jonge, W., van de Riet, R.P.: Answering queries without revealing secrets. ACM Trans. Database Syst. 8(1):41-59 http://doi.acm.org/10.1145/319830.319833 (1983)
18. University of Dortmund, Information Systems and Security: Controlled Query Evaluation for incomplete databases, prototype implementation. http://ls6-www.cs.uni-dortmund.de/issi/projects/cqe/
19. Wang, L., Jajodia, S., Wijesekera, D.: Securing OLAP data cubes against privacy breaches. In: IEEE Symposium on Security and Privacy, pp. 161-178. IEEE Computer Society (2004)
20. Wang, L., Li, Y., Wijesekera, D., Jajodia, S.: Precisely answering multi-dimensional range queries without privacy breaches. In: Snekkenes, E., Gollmann, D.(eds.) ESORICS, Lecture Notes in Computer Science, vol. 2808, pp. 100-115. Springer (2003)
21. Winslett M., Smith K. and Qian X. (1994). Formal query languages for secure relational databases. ACM Trans. Database Syst. 19(4): 626-662