Third European Symposium on Research in Computer Security (ESORICS 94)
Aggregation in Relational Databases: Controlled Disclosure of Sensitive Information
Amihai Motro, Donald G. Marks, Sushil Jajodia
Keywords :
Abstract : It has been observed that often the release of a limited part of an information resource poses no security risks, but the release of a sufficiently large part of that resource might pose such risks. This problem of controlled disclosure of sensitive information is an example of what is known as the aggregation problem. In this paper we argue that it should be possible to articulate specific secrets within a database that should be protected against overdisclosure, and we probide a general framework in which such controlled disclosure can be achieved. Our methods also foil attempts to attack these predifined secrets by disguising queries as queries whose definitions do not resemble secrets, but whose answers nevertheless "nibble" at secrets. Our method also foil attempts to attack secrets by breaking queries into sequences of smaller requests that extract information less conspicuously. The accounting methods we employ to thwart such attempts are shown to be both accurate and economical.
(Pages 431-445)