On Privacy And The Web

Chor et al [3] show that when accessing a single public database, a user is only guaranteed safety from an administrator inferring the user's real intentions (an inference attack) when the user downloads the entire database. Although this approach is somewhat impractical, it is the only way in which to guarantee complete safety from prying eyes. Inference attacks on a user generally assume that the attack is taking place from the perspective of the Database Administrator. It is therefore implicit that there is an intimate knowledge of the database being accessed by the user. Given the nature of the Web and some of the Large Public Databases being accessed via the Web, we wish to determine if inference attacks launched on a user can be successful without detailed knowledge of the database. Can we successfully violate the privacy of a user by analysing his Web queries to the Large Public Database over a period of time? If this is possible, how can one circumvent such an attack? A s...

• Type: Conference
• Year: 2004
• Where: ISSA
• Authors: Wesley Brandi
• Keywords: Inference Attack, ISSA 2004, ISSA 2008, Large Public Database, Public Database