基于推理通道的函数依赖推理控制

The Inference Control of Functional Dependency Based on Inference Channel

数据库推理控制是数据库安全领域的重要研究内容。函数依赖关系在推理攻击中通常会起到重要作用。文中对基于函数依赖关系的推理控制问题进行了研究,在推理通道思想的基础上,提出了一种基于最小函数依赖集构造推理通道的方法,以及一种基于推理通道的动态组合通道实例的方法,实现了在数据库运行阶段针对函数依赖关系的动态推理控制。上述方法已应用于国产数据库神舟OSCAR安全版中,实践表明,上述方法能够有效地防御基于函数依赖关系的推理攻击。

Inference control is an important domain of database security. Generally speaking, functional dependency plays an important role in inference attack. This paper studies the inference control problem based on functional dependency, and then presents a method of constructing inference channels based on minimal functional dependency set, and another method of combining the instance of inference channel dynamically based on the idea of inference channel, which achieve the goal of dynamic inference control of functional dependency. The methods above mentioned have been applied to Sbenzhou OSCAR Secure Database, and the validity of defense against the inference attack based on functional dependency has been testified.