History-dependent inference control of queries by dynamic policy adaption

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6818 LNCS, Issue , 2011, Pages 106-121

  Biskup, Joachim ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

a priori knowledge; closed query; confidentiality policy; Controlled Query Evaluation; inference control; information system; interaction history; policy adaption; propositional logic; refusal; view

Indexed keywords

CLOSED QUERY; CONFIDENTIALITY POLICY; INFERENCE CONTROL; INTERACTION HISTORY; PRIORI KNOWLEDGE; PROPOSITIONAL LOGIC; QUERY EVALUATION; REFUSAL; VIEW;

FORMAL LOGIC; INFORMATION SYSTEMS; SECURITY OF DATA; DATA PRIVACY; QUERY PROCESSING;

QUERY PROCESSING; SEARCH ENGINES;

EID: 79960204744     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-22348-8_10     Document Type: Conference Paper

References (11)

1. Abiteboul, S., Hull, R., Vianu, V.: Foundations of Databases. Addison-Wesley, Reading (1995)
2. Bell, D.E., LaPadula, L.J.: Secure computer systems: A mathematical model, volume II. Journal of Computer Security 4(2/3), 229-263 (1996); reprint of MITRE Corporation (1974)
3. Bertino, E., Buccafurri, F., Ferrari, E., Rullo, P.: A logic-based approach for enforcing access control. Journal of Computer Security 8(2/3) (2000)
4. Biskup, J.: Security in Computing Systems - Challenges, Approaches and Solutions. Springer, Heidelberg (2009)
5. Biskup, J.: Usability confinement of server reactions: Maintaining inference-proof client views by controlled interaction execution. In: Kikuchi, S., Sachdeva, S., Bhalla, S. (eds.) DNIS 2010. LNCS, vol. 5999, pp. 80-106. Springer, Heidelberg (2010)
6. Biskup, J., Bonatti, P.A.: Controlled query evaluation for enforcing confidentiality in complete information systems. Int. J. Inf. Sec. 3(1), 14-27 (2004)
7. Chen, Y., Chu, W.W.: Protection of database security via collaborative inference detection. IEEE Trans. Knowl. Data Eng. 20(8), 1013-1027 (2008)
8. Jajodia, S., Samarati, P., Sapino, M.L., Subrahmanian, V.S.: Flexible support for multiple access control policies. ACM Trans. Database Syst. 26(2), 214-260 (2001)
9. Ligatti, J., Reddy, S.: A theory of runtime enforcement, with results. In: Gritzalis, D., Preneel, B., Theoharidou, M. (eds.) ESORICS 2010. LNCS, vol. 6345, pp. 87- 100. Springer, Heidelberg (2010)
10. Schneider, F.B.: Enforceable security policies. ACM Trans. Inf. Syst. Secur. 3(1), 30-50 (2000)
11. Sicherman, G.L., de Jonge, W., van de Riet, R.P.: Answering queries without revealing secrets. ACM Trans. Database Syst. 8(1), 41-59 (1983)