数据库推理通道的动态控制

Dynamic Control of the Database Inference Channel

数据库推理问题是数据库安全研究的重要组成部分,主要研究推理通道的检测方法和控制策略。该文提出一种动态控制推理通道的方法。该方法为每个推理通道建立一个标识集合,利用集合中元素和推理通道中对象的关联来控制查询的处理,使用户能灵活地访问数据但又得不到足够的信息来推理。与以前提出的方案不同,该方案保证了数据的最大可用性,同时有效地阻止推理并保持了快速的查询处理能力。

Database inference problem is a well-known problem in database security research, The method of inference channel detection and the control strategy are mainly studied. This paper presents an approach of dynamic control over the inference problem after all inference channels have been identified in a multilevel database. A set of tokens are used for this purpose. The association of the token in the set with the object in the inference channel is used to control query processing, This approach is more efficient, in both space and time complexity, than previously proposed approaches.