The inference problem: Maintaining maximal availability in the presence of database updates

Computers and Security

Volumn 29, Issue 1, 2010, Pages 88-103

  Toland, Tyrone S ^a   Farkas, Csilla ^b   Eastman, Caroline M ^b  

^a UNIVERSITY OF SOUTH CAROLINA UPSTATE   (United States)

^b University of South Carolina   (United States)

Author keywords

Access control; Availability; Collaboration; Collusion; Confidentiality; Database; Disclosure inference; Updates

Indexed keywords

DATA AVAILABILITY; DATABASE CONSTRAINTS; EMPIRICAL RESULTS; INFERENCE ALGORITHM; INFERENCE PROBLEM; SOUNDNESS AND COMPLETENESS;

ACCESS CONTROL; DATABASE SYSTEMS; SECURITY SYSTEMS;

INFERENCE ENGINES;

EID: 71649113077     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.07.004     Document Type: Article

References (39)

1. Biskup J., and Bonatti P. Lying versus refusal for known potential secrets. Data Engineering 38 2 (2001) 199-222
2. Brodsky A., Farkas C., and Jajodia S. Secure databases: constraints, inference channels, and monitoring disclosure. IEEE Transactions on Knowledge and Data Engineering (November, 2000)
3. Buczkowski L.J. Database inference controller. In: Spooner D., and Landwehr C. (Eds). Database security III: status and prospects (1990), North-Holland, Amsterdam 311-322
4. Chen Y., and Chu W. Database security protection via inference detection. In: Mehrotra S., Zeng D., Chen H., Thuraisingham B., and Wang F. (Eds). Intelligence and security informatics. Lecture Notes in Computer Science (LNCS) vol. 3975 (2006), Springer Berlin, Heidelberg 452-458
5. Chen Y., and Chu W. Protection of database security via collaborative inference detection. In: Chen H., and Yang C. (Eds). Intelligence and security informatics. Lecture Notes in Computer Science (LNCS) vol. 135 (2008), Springer Berlin, Heidelberg 275-303
6. Dawson S, di Vimercati SDC, Samarati P. Minimal data upgrading to prevent inference and association attacks. In: Proceedings of the 18th ACM SIGMOD-SIGACT-SIGART symposium on principles of database systems; 1999a. p. 114-25.
7. Dawson S, di Vimercati SDC, Samarati P. Specification and enforcement of classification and inference constraints. In: Proceedings of the 20th IEEE symposium on security and privacy (Oakland, CA); 1999b.
8. Delugach H.S., and Hinke T.H. Wizard: a database inference analysis and detection system. IEEE Transactions on Knowledge and Data Engineering 8 1 (1996) 56-66
9. Denning D.E. Cryptography and data security (1982), Addison-Wesley, Reading, Massachusetts
10. Denning DE. Commutative filters for reducing inference threats in multilevel database systems. In: Proceedings of the IEEE symposium on security and privacy; 1985. p. 134-46.
11. Domingo-Ferrer J. Inference control in statistical databases: from theory to practice. Lecture Notes in Computer Science vol. 2316 (2002), Springer-Verlag, Berlin, Heidelberg
12. Privacy in statistical databases: casc project international workshop, PSD 2004, Barcelona, Spain, June 9-11, 2004. Proceedings series. In: Domingo-Ferrer J., and Torra V. (Eds). Privacy in statistical databases. Lecture Notes in Computer Science vol. 3050 (2004), Springer
13. Domingo-Ferrer J., and Torra V. Ordinal, continuous and heterogeneous k-anonymity through microaggregation. Data Mining and Knowledge Discovery 11 2 (2005) 117-212
14. Farkas C., and Jajodia S. The inference problem: a survey. SIGKDD Explorations Newsletter 4 2 (2002) 6-11
15. Farkas C, Toland TS, Eastman CM. The inference problem and updates in relational databases. In: Proceedings of the IFIP WG11.3 working conference on database and application security; 2001. p. 171-86.
16. Goguen JA, Meseguer J. Unwinding and inference control. In: Proceedings of the IEEE symposium on security and privacy; 1984. p. 75-86.
17. Hinke TH. Inference aggregation detection in database management systems. In Proceedings of the IEEE symposium on security and privacy; 1988. p. 96-106.
18. Hinke T.H., Delugach H.S., and Chandrasekhar A. A fast algorithm for detecting second paths in database inference analysis. Journal of Computer Security 3 2, 3 (1995) 147-168
19. Hinke TH, Delugach HS, Wolf R. A framework for inference directed data mining. In: Proceedings of the 10th IFIP WG11.3 workshop on database security; 1996. p. 229-39.
20. Hinke T.H., Delugach H.S., and Wolf R.P. Protecting databases from inference attacks. Computers and Security 16 8 (1997) 687-708
21. Ishihara Y., Ako S., and Fujiwara T. Security against inference attacks on negative information in object-oriented databases. ICICS 2002, Lecture Notes in Computer Science vol. 2513 (2002), Springer-Verlag, London, UK 49-60
22. Jajodia S., and Meadows C. Inference problems in multilevel secure database management systems. In: Abrams M., Jajodia S., and Podell H. (Eds). Information security: an integrated collection of essays (1995), IEEE Computer Society Press, Los Alamitos, Calif. 570-584
23. Keefe T.F., Thuraisingham M.B., and Tsai W.T. Secure query-processing strategies. IEEE Computer (1989) 63-70
24. Marks D.G. Inference in MLS database systems. IEEE Transactions on Knowledge and Data Engineering 8 1 (1996) 46-55
25. Marks D.G., Motro A., and Jajodia S. Enhancing the controlled disclosure of sensitive information. Proceedings of the European symposium on research in computer security. Lecture Notes in Computer Science vol. 1146 (1996), Springer-Verlag 290-303
26. Mazumdar S, Stemple D, Sheard, T. Resolving the tension between integrity and security using a theorem prover. In: Proceedings of the ACM int'l conference on management of data; 1988. p. 233-42.
27. Morgenstern M. Controlling logical inference in multilevel database systems. In: Proceedings of the IEEE symposium on security and privacy; 1988. p. 245-55.
28. Sicherman G.L., de Jonge W., and van de Riet R.P. Answering queries without revealing secret. ACM Transactions on Database Systems 8 1 (1983) 41-59
29. Smith GW. Modeling security-relevant data semantics. In: Proceedings of the IEEE symposium on research in security and privacy; 1990. p. 384-91.
30. Stachour P.D., and Thuraisingham B. Design of LDV: a multilevel secure relational database management system. IEEE Transactions on Knowledge and Data Engineering 2 2 (1990) 190-209
31. Staddon J. Dynamic inference control. DMKD '03: proceedings of the eighth ACM SIGMOD workshop on research issues in data mining and knowledge discovery (2003), ACM Press 94-100
32. Su T., and Ozsoyoglu G. Inference in MLS database systems. IEEE Transactions on Knowledge and Data Engineering 3 4 (1991) 474-485
33. Thuraisingham B.M. Security checking in relational database management systems augmented with inference engines. Computers & Security 6 (1987) 479-492
34. Thuraisingham B.M. Database and applications security; integrating information security and data management (2005), Auerbach Publications, Boca Raton, FL
35. 2Mon): an improved query processing solution. In: Jonker W., and Petkovic M. (Eds). Proceedings of secure data management: second VLDB workshop (SDM 2005) (2005), Springer-Verlag, Berlin Heidelberg, Trondheim, Norway 124-142
36. Ullman J.D. Principles of database and knowledge-base systems vols. 1, 2 (1988), Computer Science Press, Rockville, MD
37. Willenborg L., and de Waal T. Elements of statistical disclosure control. Lecture notes in statistics vol. 155 (2001), Springer-Verlag, New York, NY
38. Woodruff D., and Staddon J. Private inference control. CCS '04: proceedings of the 11th ACM conference on computer and communications security (2004), ACM Press, New York, NY, USA 188-197
39. Yip RW, Levitt KN. Data level inference detection in database systems. In: Proceedings of the 11th IEEE computer security foundation workshop (Rockport, MA); June 1998. p. 179-89.