Minimal Data Upgrading to Prevent Inference and Association

Despite advances in recent years in the area of mandatory access control in database systems, today's information repositories remain vulnerable to inference and data association attacks that can result in serious information leakage. Such information leakage can be prevented by properly classifying information according to constraints that express relationships among the security levels of data objects. In this paper we address the problem of classifying information by enforcing explicit data classi cation as well as inference and association constraints. We formulate the problem of determining a classi cation that ensures satisfaction of the constraints, while at the same time guaranteeing that information will not be unnecessarily overclassi ed. We present an approach to the solution of this problem and give an algorithm implementing it which is linear in simple cases, and low-order polynomial (n2 ) in the general case. We also analyze a variation of the problem which is NP-ha...

• Type: Conference
• Year: 1999
• Where: PODS
• Authors: Steven Dawson, Sabrina De Capitani di Vimercati, Patrick Lincoln, Pierangela Samarati
• Keywords: Classi Cation, Data Classi Cation, Database, Information Leakage, PODS 1999