Incomplete Information in Relational Databases
Journal of the ACM (JACM)
Efficiently updating materialized views
SIGMOD '86 Proceedings of the 1986 ACM SIGMOD international conference on Management of data
A homogeneous relational model and query languages for temporal databases
ACM Transactions on Database Systems (TODS)
Updating derived relations: detecting irrelevant and autonomously computable updates
ACM Transactions on Database Systems (TODS)
Database models for infinite and indefinite temporal information
Information Systems
A temporal authorization model
CCS '94 Proceedings of the 2nd ACM Conference on Computer and communications security
Solving satisfiability and implication problems in database systems
ACM Transactions on Database Systems (TODS)
Secure audit logs to support computer forensics
ACM Transactions on Information and System Security (TISSEC)
A foundation of CODD's relational maybe-operations
ACM Transactions on Database Systems (TODS)
Developing time-oriented database applications in SQL
Developing time-oriented database applications in SQL
The TSQL2 Temporal Query Language
The TSQL2 Temporal Query Language
Problem of Incomplete Information in Relational Databases
Problem of Incomplete Information in Relational Databases
Extensions to SQL for Historical Databases
IEEE Transactions on Knowledge and Data Engineering
Incremental Implementation Model for Relational Databases with Transaction Time
IEEE Transactions on Knowledge and Data Engineering
Queries on Change in an Extended Relational Model
IEEE Transactions on Knowledge and Data Engineering
A foundation for vacuuming temporal databases
Data & Knowledge Engineering
Temporal Query Languages: A Survey
ICTL '94 Proceedings of the First International Conference on Temporal Logic
VLDB '98 Proceedings of the 24rd International Conference on Very Large Data Bases
Incomplete Information in Relational Temporal Databases
VLDB '92 Proceedings of the 18th International Conference on Very Large Data Bases
Expiration of Historical Databases
TIME '01 Proceedings of the Eighth International Symposium on Temporal Representation and Reasoning (TIME'01)
Working Models for Uncertain Data
ICDE '06 Proceedings of the 22nd International Conference on Data Engineering
Transaction Time Support Inside a Database Engine
ICDE '06 Proceedings of the 22nd International Conference on Data Engineering
Threats to privacy in the forensic analysis of database systems
Proceedings of the 2007 ACM SIGMOD international conference on Management of data
Processing conjunctive predicates and queries
VLDB '80 Proceedings of the sixth international conference on Very Large Data Bases - Volume 6
Limiting disclosure in hippocratic databases
VLDB '04 Proceedings of the Thirtieth international conference on Very large data bases - Volume 30
Tamper detection in audit logs
VLDB '04 Proceedings of the Thirtieth international conference on Very large data bases - Volume 30
On the correctness criteria of fine-grained access control in relational databases
VLDB '07 Proceedings of the 33rd international conference on Very large data bases
Skippy: a new snapshot indexing method for time travel in the storage manager
Proceedings of the 2008 ACM SIGMOD international conference on Management of data
AuditGuard: a system for database auditing under retention restrictions
Proceedings of the VLDB Endowment
Records retention in relational database systems
Proceedings of the 17th ACM conference on Information and knowledge management
Fast and Simple Relational Processing of Uncertain Data
ICDE '08 Proceedings of the 2008 IEEE 24th International Conference on Data Engineering
Auditing a Database under Retention Restrictions
ICDE '09 Proceedings of the 2009 IEEE International Conference on Data Engineering
Trustworthy vacuuming and litigation holds in long-term high-integrity records retention
Proceedings of the 13th International Conference on Extending Database Technology
PolicyReplay: misconfiguration-response queries for data breach reporting
Proceedings of the VLDB Endowment
The inequality-satisfiability problem
Operations Research Letters
Generalizing database forensics
ACM Transactions on Database Systems (TODS)
Hi-index | 0.00 |
Auditing the changes to a database is critical for identifying malicious behavior, maintaining data quality, and improving system performance. But an accurate audit log is an historical record of the past that can also pose a serious threat to privacy. Policies that limit data retention conflict with the goal of accurate auditing, and data owners have to carefully balance the need for policy compliance with the goal of accurate auditing. In this paper, we provide a framework for auditing the changes to a database system while respecting data retention policies. Our framework includes an historical data model that supports flexible audit queries, along with a language for retention policies that can hide individual attribute values or remove entire tuples from the history. Under retention policies, the audit history is partially incomplete. Thus, audit queries on the protected history can include imprecise results. We propose two different models (a tuple-independent model and a tuple-correlated model) for formalizing the meaning of audit queries. We implement policy application and query answering efficiently in a standard relational system and characterize the cases where accurate auditing can be achieved under retention restrictions.