统计数据库对于和函数的安全性

THE SECURITY OF STATISTICAL DATABASES WITH QUERIES OF TYPE SUM

本文讨论了统计数据库对于和函数查询的若干安全问题。如果查询的类型是K个元素之和,本文给出了一个只用3[log_2(k+1)]-2次查询就妥协数据库的方法。本文还研究了利用限制每个元素被查询的次数来保护统计数据库的可能性,且只有限制每个元素不能被查询两次以上,统计数据库对于和函数才是安全的。对于数据经常更新的数据库,这个方法还是可行的。

This paper discusses some security problems of the statistical databases with queries of type sum. If the type of queries is the sum of k elements, it presents a method to compromise statistical databases with 3[log2(k+ l)]-2 queries. It investigates if statistical databases can be protected by restricting the number of queries involving every elements. The statistical databases are secure only when the number of queries involving every element is not larger than two. The method is feasible for statistical databases with constantly changing data.