Handbook of Database Security (eBook)

Contents 8
List of Contributors 10
1 Recent Advances in Access Control 14
1 Introduction 14
2 Classical Access Control Models 16
3 Credential-Based Access Control 22
4 Policy Composition 26
5 Access Control Through Encryption 30
6 Conclusions 35
Acknowledgements 35
References 36
2 Access Control Models for XML 40
1 Introduction 40
2 Preliminary Concepts 41
3 XML Access Control Requirements 46
4 XML Access Control Models 50
5 Conclusions 63
References 64
3 Access Control Policy Languages in XML 67
1 Introduction 67
2 Policy Specification Languages 68
3 Example XML Document and Associated Policy 68
4 XML Access Control Policy Languages 70
5 Policy Modeling and Generation 78
6 Conclusions 81
References 82
4 Database Issues in Trust Management and Trust Negotiation 84
1 Introduction to Trust Management 84
2 What is Trust Management? 86
3 History 91
4 Evaluation Problems and Strategies 100
5 Automated Trust Negotiation 110
6 Open Issues and Trends 118
References 120
5 Authenticated Index Structures for Outsourced Databases 125
1 Introduction 125
2 Cryptographic Background 126
3 Authenticated Index Structures for Selection Queries 129
4 Authentication Index Structures in Dynamic Settings 140
5 Query Freshness 143
6 Extensions 143
7 Conclusion 144
References 145
6 Towards Secure Data Outsourcing 147
1 Introduction 148
2 Designing Secure Data Outsourcing Mechanisms. 150
3 Related Work. 162
4 Acknowledgments 164
References 164
7 Managing and Querying Encrypted Data 172
1 Introduction 172
2 DAS - Storing & Querying Encrypted Data
3 Trust, Encryption, Key-management, Integrity & Data Confidentiality
4 Summary & Related Work
5 Acknowledgements 197
References 197
8 Security in Data Warehouses and OLAP Systems 200
1 Introduction 200
2 Background 202
3 Security Requirements 206
4 A Three-Tier Security Architecture 208
5 Securing OLAP Data Cubes 210
6 Conclusion 219
References 219
9 Security for Workflow Systems 222
1 Introduction 222
2 Security Requirements in Workflow Systems 224
3 Workflow Authorization Model 225
4 Separation of Duty 226
5 Delegation of Authority 232
6 Conflict-of-Interest 234
7 Workflow Safety Analysis 236
8 Open Issues 236
References 238
10 Secure Semantic Web Services 240
1 Introduction 240
2 Web Services Security 241
3 Security and the Semantic Web 245
4 Integrating Security, Semantic Web and Web Services Technologies 251
5 Summary and Directions 252
References 253
11 Geospatial Database Security 255
1 Introduction 255
2 Geospatial Data Models 257
3 Geospatial Access Control Models 259
4 Conclusion and Future Directions 272
References 273
12 Security Re-engineering for Databases: Concepts and Techniques 275
1 Introduction 275
2 Insider Misuse and Anomaly Detection 278
3 Data and User Profiling 280
4 Access Path Model 289
5 Security Reconfiguration 295
6 Related Work 298
7 Conclusions and Future Directions 299
References 300
13 Database Watermarking for Copyright Protection 305
1 Introduction 305
2 Model 306
3 Numeric Types 315
4 Categorical Types 325
5 Related Work 331
6 State of The Art and the Future 333
7 Conclusions 334
8 Acknowledgments 334
References 334
14 Database Watermarking: A Systematic View 337
1 Introduction 337
2 Data Type 339
3 Distortion 341
4 Sensitivity 345
5 Watermark Information 349
6 Verifiability 355
7 Data Structure 358
8 Open Issues 362
References 362
15 Trustworthy Records Retention 364
1 Introduction 364
2 Problem Definition 365
3 Usage Scenario and Threat Model 367
4 Storage Architectures 369
5 Resistance to Physical Attack 373
6 Trustworthy Indexing 375
7 Trustworthy Migration 380
8 Trustworthy Deletion 382
9 Open Problems 385
Acknowledgements 385
References 386
16 Damage Quarantine and Recovery in Data Processing Systems 389
1 Introduction 389
2 Overview of the DQR Problem 390
3 Traditional Failure Recovery Techniques and Their Limitations 394
4 Solving the DQR Problem 397
5 Remaining Research Issues and Concluding Remarks 408
Acknowledgement 409
References 410
17 Hippocratic Databases: Current Capabilities and Future Trends 414
1 Introduction 414
2 Founding Principles of a Hippocratic Database 415
3 Hippocratic Database Technologies 416
4 Future Work 428
5 Conclusion 432
References 432
18 Privacy-Preserving Data Mining: A Survey 435
1 Introduction 435
2 The Randomization Method 437
3 The k-Anonymity Framework 443
4 Distributed Privacy-Preserving Data Mining 449
5 Privacy-Preservation of Application Results 453
6 Limitations of Privacy: The Curse of Dimensionality 457
7 Summary 459
References 459
19 Privacy in Database Publishing: A Bayesian Perspective 465
1 Introduction 465
2 GBP: A Generic Bayesian Privacy Model 466
3 View-Based Publishing 474
4 Generalization-Based Publishing 478
5 View-Based Versus Generalization-Based Publishing 487
6 Privacy in Open-World Integration 488
7 Conclusions 489
References 489
20 Privacy Preserving Publication: Anonymization Frameworks and Principles 492
1 Introduction 492
2 k-anonymous Generalization 494
3 l-diverse Generalization 497
4 Anatomy 499
5 Summary 509
References 510
21 Privacy Protection through Anonymity in Location-based Services 512
1 Introduction 512
2 Privacy threats with LBS 513
3 Privacy protection through anonymity 518
4 Techniques to enforce anonymity 521
5 Experimental results 527
6 Conclusion 531
References 532
22 Privacy-enhanced Location-based Access Control 534
1 Introduction 534
2 Location-based Access Control Systems 535
3 Location Privacy 539
4 Obfuscation Techniques for Location Privacy Protection 544
5 Integrating Obfuscation Techniques with LBAC Systems 549
6 Conclusions 552
Acknowledgments 552
References 553
23 Efficiently Enforcing the Security and Privacy Policies in a Mobile Environment 556
1 Introduction 556
2 System Architecture for a Mobile Application Environment 559
3 Authorization Model in a Mobile Environment 561
4 Unified Index for Authorizations and Profiles 562
5 Unified Index for Authorizations and Moving Objects 564
6 Unified Index for Authorizations, Moving Objects and Profiles 570
7 Open Issues 575
References 575