Preprocessing for controlled query evaluation with availability policy

  • Authors:
  • Joachim Biskup;Lena Wiese

  • Affiliations:
  • Universität Dortmund, 44221 Dortmund, Germany. Tel.: +49-231-755-4813, Fax: +49-231-755-2405, http://ls6-www.cs.uni-dortmund.de/issi/. E-mail: biskup@ls6.cs.uni-dortmund.de;(Correspd. partially funded by a Res. Training Grp. of the DFG) Universität Dortmund, 44221 Dortmund, Germany. Tel.: +49-231-755-4813, Fax: +49-231-755-2405, http://ls6-www.cs.uni-dortmund.de ...

  • Venue:
  • Journal of Computer Security - 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec'06)
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Controlled Query Evaluation (CQE) defines a logical framework to protect confidential information in a database. By modeling a user's a priori knowledge appropriately, a CQE system not only controls access to certain database entries but also accounts for information inferred by the user. In this article, we present a static (preprocessing) CQE-approach for propositional databases with an availability policy. The resulting inference-proof and availability-preserving database ensures confidentiality of secret information while guaranteeing availability of certain database entries to a highest degree possible. We illustrate the semantics of the system by a comprehensive example and state the essential requirements for an inference-proof and availability-preserving database. We present an algorithm that accomplishes the preprocessing by combining SAT solving and “Branch and Bound”.