B. Thuraisingham. The use of conceptual structures for handling the inference problem. In C.E. Landwehr and S. Jajodia, editors, Database Security, V: Status and Prospects, pages 333--362, North-Holland, 1992. Elsevier Science Publishers.  Home/Search   Document Not in Database   Summary   Related Articles   Check

....the two entities. This line of research has been continued by Binns (Binns, 1992b) and SRI Internation (Lunt, 1989) Qian, Stickel, Karp, Lunt, Garvey, 1993) through the design and implementation of path finding programs. Also included in this inference category is the work of Thuraisingham (Thuraisingham, 1991), which uses conceptual structures to represent multilevel applications, thus providing the basis for analyzing these multilevel structures for the likelihood that an adversary can draw unauthorized inferences. Our paper, while also using conceptual structures, extends earlier work by including ....

Thuraisingham, B. (1991). The Use of Conceptual Structures for Handling the Inference Problem, and Cover Stories for Database Security. In Proceedings of the Fifth IFIP WG 11.3 Working Conference on Database Security Shepherdstown, WV, U.S.A.

.... levels [Hinke, 1988, Binns, 1992, Qian et al. 1993] The detected inference channel is eliminated by redesigning the database schema [Lunt, 1989] or upgrading the paths that lead to the inference [Stickel, 1994] There is also work on incorporating external knowledge in detecting inference [Thuraisingham, 1991, Hinke et al. 1993, Delugach and Hinke, 1996] Detecting inference at the schema level is efficient as the detection is performed at the database design time. However, it has two drawbacks. First, the database schema does not capture all dependencies that occur in an instance of the database. ....

Thuraisingham, B. (1991). The use of conceptual structures for handling the inference problem. In Proc. 5th IFIP WG11.3 Workshop on Database Security, pages 333--362.

....a complete model of all knowledge and information that might be used to infer the sensitive data, which is generally impractical, as well as the ability to recognize all sensitive implications of that information, which is generally impossible. To some extent, all knowledge based approaches, e.g. [16, 11, 6, 23, 5, 10, 4, 19], need help from System Security Officer (SSO) to generate related structures. The knowledge input from SSO represents the semantics of application. The fact that SSO can never be sure he knows all the dependencies among data means that available approaches only provide partial solutions. At most, ....

B. Thuraisingham, The Use of Conceptual Structures for Handling the Inference Problem, Proc. fifth IFIP Working Conf. Database Security, Shepherdstown, WV, November 1991.

....of data in KRS context, which is independent from the semantics of application represented by the relational database. c IFIP 1997. Published by Chapman Hall tuples. Considerable research has been done to address this problem (see, for example, the work of Hinke (Hinke 1988) Thuraisingham (Thuraisingham 1991), Binns (Binns 1992) Burns (Burns 1992) Garvey et al. Garvey et al. 1992) Hinke and Delugach (Hinke et al. 1992) Lin (Lin 1992) Qian et al. Qian et al. 1993) and Rath et al. Rath et al. 1995) The aim of these works is to yield a well designed multilevel database in the sense that a user ....

....threats through various structures. The structures used to capture semantics of application include Sphere Of Influence (Morgenstern (Morgenstern 1988) Semantic Relationship Graph (Hinke (Hinke 1988) Abductive Reasoning (Garvey et al. Garvey et al. 1991) Semantic Net (Thuraisingham (Thuraisingham 1991)) Graph (Garvey et al. Garvey et al. 1992) Conceptual Graph (Thuraisingham (Thuraisingham 1991) Hinke and Delugach (Hinke et al. 1992) Delugach and Hinke (Delugach et al. 1996) Context (Rath et al. Rath et al. 1995) and Pattern (Marks (Marks 1996) Some of these techniques can also be ....

[Article contains additional citation context not shown here]

Thuraisingham, B. (1991) The Use of Conceptual Structures for Handling the Inference Problem, Proc. fifth IFIP Working Conf. Database Security, Shepherd- stown, WV.

....users can use the structure information of database together with authorized information to deduce unauthorized information [126] 12.2.1 Proposed Solutions Recently some solutions have been proposed to handle the inference problem. The inference problem can be dealt during database design [36, 87, 125, 126, 138], or during query processing [78, 134, 137] In the first approach, security constraints during database design are handled in such a way that security violations via inference cannot occur. So many inference problems can be overcome through good design. The SeaView [93, 90] ASD Views [52] and ....

....The SeaView [93, 90] ASD Views [52] and SWORD [112] projects are examples of this approach. Other works have also been done to provide tools which allow data designer to analyze a database schema for potential inference problems and remove those. DISSECT [53, 108] Multilevel Semantic Net [138], IAT [70] and Database Inference Controller [21] are examples. There are some non reference formal models which can be used to verify any good design against them as well. The works of [126] 130] 70] 18] and [86] are examples. In the second approach, the query processor is augmented with ....

M. B. Thuraisingham. The Use of Conceptual Structures for Handling The Inference Problem. In C. E. Landwehr and S. Jajodia, editors, Database Security V, pages 333--362. Elsevier Science Publishers B. V. (North-Holland) IFIP, 1992.

....are called conceptual structures [Sowa 84] Conceptual structures are useful in that they can represent and reason about the real world like humans. The database security research community became interested in conceptual structures because they can be used to represent a multilevel application [Thuraisingham 91] Hinke showed how inference may be detected by traversing alternate paths between two nodes in the graph. Graph traversal in semantic nets corresponds to limited inference. The classification of implied links found by graph traversal is determined by the classifications of the traversed links. ....

M. B. Thuraisingham. The use of conceptual structures for handling the inference problem. In Proceedings 5th IFIP 11.3 WG on Database Security, 1991.

....but does not enable the detection of more complex inferences. Others since have also shown how to represent multilevel database applications using conceptual structures developed for knowledge based system applications and subsequently reasoning about the application using deduction techniques [Thuraisingham 90f, 91; Delugach 92, 93; Hinke 92; Garvey 92] Auxiliary semantic nets can be used to express security constraints. Smith suggests extensions to Urban s semantic data model to represent multilevel applications [Smith 90b; Urban 90] Smith states that eventually the representation could be ....

....One of the results of the effort was that the specific rules required to find the classified relationship did not have to be explicitly stated. The AERIE research is based on these results and on conceptual graph structures. AERIE extends the inference techniques suggested by Thuraisingham [Thuraisingham 90f] by classifying inference targets and using a two phase inference approach. Two supporting prototype tools were developed: an inference detection tool called Merlin to validate the AERIE algorithms; and a rule based, automated inference database generator called Genie to facilitate the ....

M. B. Thuraisingham. The use of conceptual structures for handling the inference problem. Technical Report M90-55, The MITRE Corporation, Bedford, MA, August 1990.

....the attributes properly. However, redesigning the database schema results in data duplication which leads to update anomalies. It also requires modifications to the existing application programs. There is also work on incorporating external knowledge into the inference detection systems [18, 7, 16, 17, 3]. More recently, researchers suggest using data of the database to generate a richer set of functional dependencies for inference detection. Hinke et al. use cardinality associations to discover potential inference paths [8] Hale et al. incorporate imprecise and fuzzy database relations into ....

B. Thuraisingham. The use of conceptual structures for handling the inference problem. In C. E. Landwehr and S. Jajodia, editors, Database Security V: Status and Prospects, pages 333--362. Elsevier Science Pub. Co., 1992.

....SRI International [5,15,18] have developed an interactive tool, DISSECT, for detecting and eliminating compositional inference channels due to foreign key FDs. The DISSECT model builds on earlier work on inference control, including tools and techniques developed by Buczkowski [1] Thuraisingham [23,24], and Hinke [9] The current version of DISSECT [18] is limited to analyzing MLS database schemas (intensions) rather than actual MLS relations (extensions) Nevertheless, its success shows that it is possible to develop practical tools for dealing with the difficult problem of inference control. ....

M.B. Thuraisingham, The use of conceptual structures for handling the inference problem, Technical Report M90-55, The MITRE Corporation, Bedford, Massachusetts, 1990.

No context found.

B. Thuraisingham. The use of conceptual structures for handling the inference problem. In C.E. Landwehr and S. Jajodia, editors, Database Security, V: Status and Prospects, pages 333--362, North-Holland, 1992. Elsevier Science Publishers.

No context found.

B. Thuraisingham. The Use of Conceptual Structures for Handling the Inference Problem In C.E. Landwehr and S. Jajodia, editors, Database Security, V: Status and Prospects, pages 333-362, North-Holland, 1992. Elsevier Science Publishers.

No context found.

Thuraisingham, B. The use of conceptual structures for handling the inference problem. In Database Security V, pp.333362

No context found.

B. Thuraisingham. The use of conceptual structures for handling the inference problem. In Database Security V, pp.333-362.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC