Policyreplay: Misconfiguration-response queries for data breach reporting

Proceedings of the VLDB Endowment

Volumn 3, Issue 1, 2010, Pages 36-47

  Fabbri, Daniel ^a   Lefevre, Kristen ^a   Zhu, Qiang ^b  

^a UNIVERSITY OF MICHIGAN   (United States)

^b UNIVERSITY OF MICHIGAN DEARBORN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; INFORMATION DISSEMINATION; QUERY PROCESSING;

ACCESS CONTROL POLICIES; INFORMATION PROPAGATION; MISCONFIGURATIONS; RUNTIMES; SQL QUERY; UNAUTHORIZED ACCESS; USERS ACCESS;

QUERY LANGUAGES;

EID: 84859221632     PISSN: None     EISSN: 21508097     Source Type: Conference Proceeding    
DOI: 10.14778/1920841.1920851     Document Type: Article

References (22)

1. R. Agrawal, R. J. Bayardo, C. Faloutsos, J. Kiernan, R. Rantzau, and R. Srikant. Auditing compliance with a hippocratic database. In VLDB, 2004.
2. R. Agrawal, A. Evfimievski, J. Kiernan, and R. Velu. Auditing disclosure by relevance ranking. In SIGMOD, 2007.
3. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. Hippocratic databases. In VLDB, 2002.
4. K. Bai and P. Liu. Data damage tracking quarantine and recovery scheme for mission-critical database systems. In EDBT, 2009.
5. D. Bhagwat, L. Chiticariu, W. Chiew Tan, and G. Vijayvargiya. An annotation management system for relational databases. In VLDB, 2004.
6. P. Buneman, A. Chapman, and J. Cheney. Provenance management in curated databases. In SIGMOD, 2006.
7. T. Chiueh and D. Pilania. Design, implementation, and evaluation of a repairable database management system. In ICDE, 2005.
8. Y. Cui and J. Widom. Practical lineage tracing in data warehouses. In ICDE, 2000.
9. M. R. Garey and D. S. Johnson. Computer and Intractability: A Guide to the Theory of NP-Completeness. W. H. Freeman, 1979.
10. C. S. Jensen, L. Mark, and N. Roussopoulos. Incremental implementation model for relational databases with transaction time. IEEE Transactions on Knowledge and Data Engineering, 1991.
11. D. Kiely. SQL Server 2008 Security Overview for Database Administrators. SQL Server Technical Article, October 2007.
12. K. LeFevre, R. Agrawal, V. Ercegovac, R. Ramakrishnan, Y. Xu, and D. DeWitt. Limiting disclosure in hippocratic databases. In VLDB, 2004.
13. P. Liu, P. Ammann, and S. Jajodia. Rewriting histories: Recovering from malicious transactions. Distributed and Parallel Databases, 2000.
14. D. Lomet, Z. Vagena, and R. Barga. Recovery from bad user transactions. In SIGMOD, 2006.
15. W. Lu and G. Miklau. Auditing a database under retention restrictions. In ICDE, 2009.
16. R. Motwani, S. Nabar, and D. Thomas. Auditing sql queries. In ICDE, 2008.
17. A. Nanda. Fine-grained auditing for real-world problems. Oracle Magazine.
18. R. Reeder, L. Bauer, L. Cranor, M. Reiter, K. Bacon, K. How, and H. Strong. Expandable grids for visualizing and authoring computer security policies. In CHI, 2008.
19. S. Rizvi, A. Mendelzon, S. Sudershan, and P. Roy. Extending query rewriting techniques for fine-grained access control. In SIGMOD, 2004.
20. P. Roy, S. Seshadri, S. Sudarshan, and S. Bhobe. Efficient and extensible algorithms for multi-query optimization. In SIGMOD, 2000.
21. T. J. Wasserman. DB2 UDB Security Part 5: Understanding the DB2 Audit Facility, March 2006.
22. Y. Zhong, P. Deshpande, J. Naughton, and A. Shukla. Simultaneous optimization and evaluation of multiple dimensional queries. In SIGMOD, 1998.