Building disclosure risk aware query optimizers for relational databases

Proceedings of the VLDB Endowment

Volumn 3, Issue 1, 2010, Pages 13-24

  Canim, Mustafa ^a   Kantarcioglu, Murat ^a   Hore, Bijit ^b   Mehrotra, Sharad ^b  

^a The University of Texas at Dallas   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DIGITAL STORAGE; MALWARE; QUERY PROCESSING; RELATIONAL DATABASE SYSTEMS; SECURITY OF DATA; VIRTUAL STORAGE;

CRYPTOGRAPHIC KEY; QUERY OPTIMIZATION; QUERY OPTIMIZER; RELATIONAL DATABASE; RELATIONAL DBMS; SENSITIVE INFORMATIONS; STANDARD QUERIES; STORAGE ENGINES;

CRYPTOGRAPHY;

EID: 84856902066     PISSN: None     EISSN: 21508097     Source Type: Conference Proceeding    
DOI: 10.14778/1920841.1920849     Document Type: Article

References (17)

1. N. Anciaux, M. Benzine, L. Bouganim, P. Pucheral, and D. Shasha. Ghostdb: querying visible and hidden data without leaks. In SIGMOD '07: Proceedings of the 2007 ACM SIGMOD international conference on Management of data, pages 677-688, New York, NY, USA, 2007. ACM.
2. M. Canim, M. Kantarcioglu, and A. Inan. Query optimization in encrypted relational databases by vertical schema partitioning. In Secure Data Management, pages 1-16, 2009.
3. J. Chow, B. Pfaff, T. Garfinkel, and M. Rosenblum. Shredding your garbage: reducing data lifetime through secure deallocation. In SSYM'05: Proceedings of the 14th conference on USENIX Security Symposium, pages 22-22, Berkeley, CA, USA, 2005. USENIX Association.
4. S. Gaudin. Security breaches cost $90 to $305 per lost record. http://www.informationweek.com/news/security/showArticle. jhtml?articleID=199000222.
5. S. Haber and W. S. Stornetta. How to time-stamp a digital document. J. Cryptology, 3(2):99-111, 1991.
6. J. A. Halderman, S. D. Schoen, N. Heninger, W. Clarkson, W. Paul, J. A. Calandrino, A. J. Feldman, J. Appelbaum, and E. W. Felten. Lest we remember: cold-boot attacks on encryption keys. Commun. ACM, 52(5):91-98, 2009.
7. B. Iyer, S. Mehrotra, E. Mykletun, G. Tsudik, and Y. Wu. A framework for efficient storage security in rdbms. In International Conference on Extending Database Technology (EDBT 2004), 2004.
8. P. Ngatchou, A. Zarei, and M. El-Sharkawi. Pareto multi objective optimization. In Intelligent Systems Application to Power Systems, 2005. Proceedings of the 13th International Conference on, pages 84-91, Nov. 2005.
9. K. E. Pavlou and R. T. Snodgrass. Forensic analysis of database tampering. ACM Trans. Database Syst., 33(4):1-47, 2008.
10. R. Ramakrishnan and J. Gehrke. Database Management Systems. McGraw-Hill, 2003.
11. R. Ramamurthy and D. J. DeWitt. Buffer-pool aware query optimization. In CIDR, pages 250-261, 2005.
12. B. Schneier and J. Kelsey. Secure audit logs to support computer forensics. ACM Trans. Inf. Syst. Secur., 2(2):159-176, 1999.
13. R. T. Snodgrass, S. S. Yao, and C. Collberg. Tamper detection in audit logs. In VLDB '04: Proceedings of the Thirtieth international conference on Very large data bases, pages 504-515. VLDB Endowment, 2004.
14. P. Stahlberg, G. Miklau, and B. N. Levine. Threats to privacy in the forensic analysis of database systems. In Proceedings of the 2007 ACM SIGMOD international conference on Management of data, pages 91-102, New York, NY, USA, 2007. ACM.
15. V. B. R. Team. 2009 data breach investigations supplemental report, anatomy of a data breach. www.verizonbusiness.com/go/09SuppDBIR.
16. TPC. TPC-H, Decision Support Benchmark. http://www.tpc.org/tpch/.
17. S. B. Yao. Approximating block accesses in database organizations. Commun. ACM, 20(4):260-261, 1977.