Lecture9

Data and Applications Security Developments and Directions: 

Data and Applications Security Developments and Directions Dr. Bhavani Thuraisingham The University of Texas at Dallas Lecture #9 Inference Problem - II February 8, 2005

Outline : 

Outline Security Constraint Processing Use of Conceptual Structures

Security Constraint Processing : 

Security Constraint Processing Security Constraints are rules that assign security levels to the data MLS/DBMS is augmented with an Inference Engine Inference Engine is the Inference Controller Integrated Architecture for Security Constraint processing Query, Update and Database design operations

Inference Engine Approach : 

Inference Engine Approach

Constraint Generation : 

Constraint Generation

Query Processor : 

Query Processor

Update Processor : 

Update Processor

Database Design Tool : 

Database Design Tool

Integrated Architecture : 

Integrated Architecture

Release Control Management : 

Release Control Management

Use of Conceptual Structures: 

Use of Conceptual Structures Use conceptual structures to model the application E.g., semantic data models, semantic nets, conceptual graphs, etc. Use the reasoning strategy of the conceptual structure and determine if security violation via inference can occur

Multilevel Semantic Nets : 

Multilevel Semantic Nets

Complex Multilevel Semantic Net : 

Complex Multilevel Semantic Net REAGAN Passengers Carries SUN Explosive Mediterranean Sea 16 June 2000 India Italy Destination Location Date Smith Captain Battle Management 20 years Skills Skills Type

ISA/AKO Links : 

ISA/AKO Links

Example Rules - II : 

Example Rules - II

Example Rules - II : 

Example Rules - II

Applying Transfer Rules : 

Applying Transfer Rules REAGAN SUN Explosive Mediterranean Sea India Destination Location Carries Type (a) REAGAN SUN Explosive Mediterranean Sea India Location Carries Type (b) Smith Battle Management Skills REAGAN SUN Explosive Mediterranean Sea India Destination Location Carries Type (c) Combines (a) and (b) Smith Battle Management Skills

Security Constraints : 

Security Constraints SHIPS WEAPONS Carries (a) REAGAN SUN SHIPS Destination Carries (b) REAGAN SUN COUNTRY Mediterranean SHIPS WEAPONS Carries (a) REAGAN SUN SHIPS Destination Carries (b) REAGAN SUN COUNTRY Mediterranean Location

Security Constraint Violation - I : 

Security Constraint Violation - I

Security Constraint Violation - II : 

Security Constraint Violation - II

Universal and Existential Conditionals : 

Universal and Existential Conditionals

Matching Vectors : 

Matching Vectors

Matching and Binding : 

Matching and Binding Carries FLORIDA MOON Type Capital (c ) Results from (a) and (b) Carries Location (a) SHIP: ALL X Mediterranean WEAPONS: SOME Y India Destination Explosive REAGAN SUN Explosive Mediterranean Sea India Location Smith Captain Battle Management New Delhi Skills Type Carries FLORIDA MOON Type Capital (b) REAGAN SUN Explosive Mediterranean Sea India Location Smith Captain Battle Management New Delhi Skills Type Carries FLORIDA MOON Type Capital (c ) Results from (a) and (b) Destination Destination Destination Carries Type Carries

Negative Statements : 

Negative Statements

Refutation: 

Refutation SHIPS WEAPONS DESTINATION REAGAN Pacific Ocean WEAPONS Australia (a) SHIPS WEAPONS DESTINATION REAGAN Australia X X SHIPS WEAPONS FLORIDA REAGAN WEAPONS Australia (c ) DESTINATION (b) SHIPS FLORIDA WEAPONS Australia DESTINATION SHIPS FLORIDA WEAPONS Australia LOCATION WEAPONS REAGAN Pacific Ocean WEAPONS REAGAN Pacific Ocean (d) SHIPS WEAPONS FLORIDA REAGAN WEAPONS Australia DESTINATION LOCATION WEAPONS Pacific Ocean (e) LOCATION

Directions: 

Directions Inference problem is still being investigated Census bureau still working on statistical databases Need to find real world examples in the Military world Inference problem with respect to medial records Much of the focus is now on the Privacy problem Privacy problem can be regarded to be a special case of the inference problem