Data and Applications Security Developments and Directions

1
Data and Applications Security Developments and
Directions

• Dr. Bhavani Thuraisingham
• The University of Texas at Dallas
• Lecture 8
• Inference Problem - II
• February 6, 2008

2
Outline

• Security Constraint Processing
• Use of Conceptual Structures

3
Security Constraint Processing

• Security Constraints are rules that assign
  security levels to the data
• MLS/DBMS is augmented with an Inference Engine
• Inference Engine is the Inference Controller
• Integrated Architecture for Security Constraint
  processing
• Query, Update and Database design operations

4
Inference Engine Approach
5
Constraint Generation

6
Query Processor

7
Update Processor

8
Database Design Tool

9
Integrated Architecture

10
Release Control Management

11
Use of Conceptual Structures

• Use conceptual structures to model the
  application
• E.g., semantic data models, semantic nets,
  conceptual graphs, etc.
• Use the reasoning strategy of the conceptual
  structure and determine if security violation via
  inference can occur

12
Multilevel Semantic Nets
13
Complex Multilevel Semantic Net
Italy
Destination
India
20 years
Mediterranean
Sea
Skills
Location
REAGAN
Smith
Captain
Date
16 June 2000
Skills
Carries
SUN
Explosive
Passengers
Battle
Management
Type
14
ISA/AKO Links
15
Example Rules - II
16
Example Rules - II
17
Applying Transfer Rules
India
Destination
Mediterranean
Sea
India
Mediterranean
Sea
(b)
Location
REAGAN
Location
REAGAN
Smith
Carries
(a)
Carries
Skills
Type
SUN
Explosive
Type
Battle
SUN
Explosive
Management
Destination
India
Mediterranean
Sea
Location
REAGAN
Smith
(c) Combines (a) and (b)
Carries
Skills
Type
Battle
SUN
Explosive
Management
18
Security Constraints
Carries
Carries
SHIPS
SHIPS
REAGAN
REAGAN
WEAPONS
SUN
WEAPONS
SUN
(a)
(a)
Mediterranean
Mediterranean
Location
Carries
Carries
SHIPS
SHIPS
REAGAN
REAGAN
SUN
SUN
(b)
(b)
Destination
Destination
COUNTRY
COUNTRY
19
Security Constraint Violation - I
20
Security Constraint Violation - II
21
Universal and Existential Conditionals
22
Matching Vectors
23
Matching and Binding
India
Destination
Location
Mediterranean
SHIP ALL X
(a)
Destination
Carries
Mediterranean
India
New Delhi
Sea
Explosive
WEAPONS SOME Y
Destination
Capital
Capital
Type
Location
REAGAN
Smith
Captain
(b)
FLORIDA
FLORIDA
India
New Delhi
Mediterranean
Skills
Sea
Carries
Carries
Destination
Capital
Carries
Battle
Location
MOON
REAGAN
SUN
Explosive
MOON
Management
Smith
Type
Type
Captain
FLORIDA
Type
Skills
Carries
(c ) Results from (a) and (b)
(c ) Results from (a) and (b)
Carries
Battle
SUN
Explosive
MOON
Management
Type
Type
24
Negative Statements
25
Refutation
LOCATION
REAGAN
FLORIDA
SHIPS
SHIPS
WEAPONS
REAGAN
WEAPONS
Pacific Ocean
DESTINATION
DESTINATION
(a)
(b)
Australia
Australia
WEAPONS
WEAPONS
FLORIDA
FLORIDA
WEAPONS
REAGAN
WEAPONS
REAGAN
SHIPS
SHIPS
DESTINATION
REAGAN
SHIPS
WEAPONS
Australia
LOCATION
DESTINATION
X
X
Pacific Ocean
Pacific Ocean
(c )
Australia
Australia
WEAPONS
WEAPONS
(d)
FLORIDA
SHIPS
WEAPONS
REAGAN
LOCATION
DESTINATION
Australia
Pacific Ocean
WEAPONS
WEAPONS
(e)
26
Directions

• Inference problem is still being investigated
• Census bureau still working on statistical
  databases
• Need to find real world examples in the Military
  world
• Inference problem with respect to medial records
• Much of the focus is now on the Privacy problem
• Privacy problem can be regarded to be a special
  case of the inference problem