Do You Know Where Your Data's Been? --- Tamper-Evident Database Provenance

  • Authors:
  • Jing Zhang;Adriane Chapman;Kristen Lefevre

  • Affiliations:
  • University of Michigan, Ann Arbor 48109;The MITRE Corporation, McLean 22102;University of Michigan, Ann Arbor 48109

  • Venue:
  • SDM '09 Proceedings of the 6th VLDB Workshop on Secure Data Management
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Database provenance chronicles the history of updates and modifications to data, and has received much attention due to its central role in scientific data management. However, the use of provenance information still requires a leap of faith. Without additional protections, provenance records are vulnerable to accidental corruption, and even malicious forgery, a problem that is most pronounced in the loosely-coupled multi-user environments often found in scientific research. This paper investigates the problem of providing integrity and tamper-detection for database provenance. We propose a checksum-based approach, which is well-suited to the unique characteristics of database provenance, including non-linear provenance objects and provenance associated with multiple fine granularities of data. We demonstrate that the proposed solution satisfies a set of desirable security properties, and that the additional time and space overhead incurred by the checksum approach is manageable, making the solution feasible in practice.