Inference-proof view update transactions with forwarded refreshments

Journal of Computer Security

Volumn 19, Issue 3, 2011, Pages 487-529

  Biskup, Joachim ^a   Gogolin, Christian ^a   Seiler, Jens ^a   Weibert, Torben ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

A priori knowledge; confidentiality policy; controlled execution; controlled query evaluation; inference control; inference proof; information system; integrity constraint; lying approach; propositional logic; reversibility; security; transaction; view refreshment; view update

Indexed keywords

CONFIDENTIALITY POLICY; CONTROLLED EXECUTION; INFERENCE CONTROL; INFERENCE-PROOF; INTEGRITY CONSTRAINTS; LYING APPROACH; PRIORI KNOWLEDGE; PROPOSITIONAL LOGIC; QUERY EVALUATION; REVERSIBILITY; SECURITY; TRANSACTION; VIEW REFRESHMENT; VIEW UPDATE;

CONTROL THEORY; DATABASE SYSTEMS; FORMAL LOGIC; INFORMATION SYSTEMS;

SEARCH ENGINES;

EID: 79959280117     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2011-0420     Document Type: Conference Paper

References (44)

1. S. Abiteboul, R. Hull and V. Vianu, Foundations of Databases, Addison-Wesley, Reading, MA, 1995.
2. F. Bancilhon and N. Spyratos, Update semantics of relational views, ACM Trans. Database Syst. 6(4) (1981), 557-575.
3. J. Biskup, Usability confinement of server reactions maintaining inference-proof client views by controlled interaction execution, in: Databases in Networked Information Systems, DNIS 2010, Lecture Notes in Computer Science, Vol. 5999, Springer, 2010, pp. 80-106.
4. J. Biskup and P.A. Bonatti, Lying versus refusal for known potential secrets, Data Knowl. Eng. 38(2) (2001), 199-222. (Pubitemid 32698732)
5. J. Biskup and P.A. Bonatti, Controlled query evaluation for enforcing confidentiality in complete information systems, Int. J. Inf. Sec. 3(1) (2004), 14-27.
6. J. Biskup and P.A. Bonatti, Controlled query evaluation for known policies by combining lying and refusal, Ann. Math. Artif. Intell. 40(1,2) (2004), 37-62. (Pubitemid 38103547)
7. J. Biskup and P.A. Bonatti, Controlled query evaluation with open queries for a decidable relational submodel, Ann. Math. Artif. Intell. 50(1,2) (2007), 39-77.
8. J. Biskup, D.W. Embley and J.-H. Lochner, Reducing inference control to access control for normalized database schemas, Inf. Process. Lett. 106(1) (2008), 8-12. (Pubitemid 351199847)
9. J. Biskup, C. Gogolin, J. Seiler and T. Weibert, Requirements and protocols for inference-proof interactions in information systems, in: 14th European Symposium on Research in Computer Security, ESORICS 2009, Lecture Notes in Computer Science, Vol. 5789, Springer, 2009, pp. 285-302.
10. J. Biskup and J.-H. Lochner, Enforcing confidentiality in relational databases by reducing inference control to access control, in: 10th International Conference on Information Security, ISC 2007, Lecture Notes in Computer Science, Vol. 4779, Springer, 2007, pp. 407-422.
11. J. Biskup, J.-H. Lochner and S. Sonntag, Optimization of the controlled evaluation of closed relational queries, in: IFIP Advances in Information and Communication Technology - Emerging Challenges for Security, Privacy and Trust, IFIP Series, Vol. 297, Springer, 2009, pp. 214-225.
12. J. Biskup, J. Seiler and T. Weibert, Controlled query evaluation and inference-free view updates, in: Data and Applications Security XXIII, DBSec 2009, Lecture Notes in Computer Science, Vol. 5645, Springer, 2009, pp. 1-16.
13. J. Biskup and T. Weibert, Keeping secrets in incomplete databases, Int. J. Inf. Sec. 7(3) (2008), 199-217. (Pubitemid 351722211)
14. A. Bohannon, B.C. Pierce and J.A. Vaughan, Relational lenses: a language for updatable views, in: Principles of Database Systems, PODS 2006, ACM, 2006, pp. 338-347. (Pubitemid 46946495)
15. P.A. Bonatti, S. Kraus and V.S. Subrahmanian, Foundations of secure deductive databases, IEEE Trans. Knowl. Data Eng. 7(3) (1995), 406-422.
16. A. Brodsky, C. Farkas and S. Jajodia, Secure databases: Constraints, inference channels, and monitoring disclosures, IEEE Trans. Knowl. Data Eng. 12(6) (2000), 900-919. (Pubitemid 32130742)
17. F. Cuppens and A. Gabillon, Logical foundations of multilevel databases, Data Knowl. Eng. 29(3) (1999), 259-291.
18. F. Cuppens and A. Gabillon, Cover story management, Data Knowl. Eng. 37(2) (2001), 177-201. (Pubitemid 32287853)
19. U. Dayal and P.A. Bernstein, On the correct translation of update operations on relational views, ACM Trans. Database Syst. 7(3) (1982), 381-416.
20. D.E. Denning, Cryptography and Data Security, Addison-Wesley, Reading, MA, 1982.
21. D.E. Denning, S.G. Akl, M. Heckman, T.F. Lunt, M. Morgenstern, P.G. Neumann and R.R. Schell, Views for multilevel database security, IEEE Trans. Software Eng. 13(2) (1987), 129-140.
22. A.V. Evfimievski, R. Fagin and D.P. Woodruff, Epistemic privacy, in: Principles of Database Systems, PODS 2008, ACM, 2008, pp. 171-180.
23. C. Farkas and S. Jajodia, The inference problem: A survey, SIGKDD Explorations 4(2) (2002), 6-11.
24. C. Farkas, T.S. Toland and C.M. Eastman, The inference problem and updates in relational databases, in: Database and Application Security XV, DBSec 2001, IFIP Conference Proceedings, Vol. 215, Kluwer, Dordrecht, 2001, pp. 181-194.
25. J.A. Goguen and J. Meseguer, Unwinding and inference control, in: IEEE Symposium on Security and Privacy, 1984, pp. 75-87.
26. J.W. Gray III, Toward a mathematical foundation for information flow security, in: IEEE Symposium on Security and Privacy, 1991, pp. 21-35.
27. J.Y. Halpern and K.R. O'Neill, Secrecy in multiagent systems, ACM Trans. Inf. Syst. Secur. 12(1) (2008), 5.1-5.47.
28. S.J. Hegner, An order-based theory of updates for closed database views, Ann. Math. Artif. Intell. 40(1,2) (2004), 63-125. (Pubitemid 38103548)
29. S. Jajodia and R.S. Sandhu, Towards a multilevel secure relational data model, in: International Conference on Management of Data, SIGMOD 1991, ACM, 1991, pp. 50-59.
30. K. Kenthapadi, N. Mishra and K. Nissim, Simulatable auditing, in: Principles of Database Systems, PODS 2005, ACM, 2005, pp. 118-127. (Pubitemid 43275475)
31. R. Langerak, View updates in relational databases with an independent scheme, ACM Trans. Database Syst. 15(1) (1990), 40-66. (Pubitemid 20682807)
32. T.F. Lunt, D.E. Denning, R.R. Schell, M. Heckman and W.R. Shockley, The SeaView security model, IEEE Trans. Software Eng. 16(6) (1990), 593-607.
33. H. Mantel, On the composition of secure systems, in: IEEE Symposium on Security and Privacy, 2002, pp. 88-101. (Pubitemid 34648106)
34. G. Miklau and D. Suciu, A formal analysis of information disclosure in data exchange, J. Comput. Syst. Sci. 73(3) (2007), 507-534. (Pubitemid 46027076)
35. R. Motwani, S.U. Nabar and D. Thomas, Auditing SQL queries, in: International Conference on Data Engineering, ICDE 2008, IEEE, 2008, pp. 287-296.
36. S.U. Nabar, B. Marthi, K. Kenthapadi, N. Mishra and R. Motwani, Towards robustness in query auditing, in: Very Large Data Bases, VLDB 2006, ACM, 2006, pp. 151-162.
37. P.Y.A. Ryan, Mathematical models of computer security, in: Foundations of Security Analysis and Design, FOSAD 2000, Lecture Notes in Computer Science, Vol. 2171, Springer, 2000, pp. 1-62. (Pubitemid 33364378)
38. R.S. Sandhu and S. Jajodia, Polyinstantation for cover stories, in: Computer Security - ESORICS 92, Second European Symposium on Research in Computer Security, Lecture Notes in Computer Science, Vol. 648, Springer, 1992, pp. 307-328.
39. T. Santen, A formal framework for confidentiality-preserving refinement, in: European Symposium on Research in Computer Security, ESORICS 2006, Lecture Notes in Computer Science, Vol. 4189, Springer, 2006, pp. 225-242. (Pubitemid 44609859)
40. G.L. Sicherman, W. de Jonge and R.P. van de Riet, Answering queries without revealing secrets, ACM Trans. Database Syst. 8(1) (1983), 41-59. (Pubitemid 13503447)
41. P. Stouppa and T. Studer, A formalmodel of data privacy, in: Perspectives of Systems Informatics, 6th International Andrei Ershov Memorial Conference, PSI 2006, Lecture Notes in Computer Science, Vol. 4378, Springer, 2007, pp. 400-408.
42. P. Stouppa and T. Studer, Data privacy for knowledge bases, in: International Symposium on Logical Foundations of Computer Science, LFCS 2009, Lecture Notes in Computer Science, Vol. 5407, Springer, 2009, pp. 409-421.
43. M. Winslett, K. Smith and X. Qian, Formal query languages for secure relational databases, ACM Trans. Database Syst. 19(4) (1994), 626-662.
44. Z. Zhang and A.O. Mendelzon, Authorization views and conditional query containment, in: 10th International Conference on Database Theory, ICDT 2005, Lecture Notes in Computer Science, Vol. 3363, Springer, 2005, pp. 259-273.