<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01534773</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-18T20:08:32+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Signature-Based Inference-Usability Confinement for Relational Databases under Functional and Join Dependencies</title>
            <author role="aut">
              <persName>
                <forename type="first">Joachim</forename>
                <surname>Biskup</surname>
              </persName>
              <email type="md5">bc37010be860b9426206b50bf07e07b6</email>
              <email type="domain">cs.tu-dortmund.de</email>
              <idno type="idhal" notation="numeric">1010042</idno>
              <idno type="halauthorid" notation="string">854841-1010042</idno>
              <affiliation ref="#struct-264972"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sven</forename>
                <surname>Hartmann</surname>
              </persName>
              <email type="md5">23afcbc60e241cd5e92006dd8d2404f2</email>
              <email type="domain">tu-clausthal.de</email>
              <idno type="idhal" notation="numeric">1010043</idno>
              <idno type="halauthorid" notation="string">640846-1010043</idno>
              <affiliation ref="#struct-1062084"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sebastian</forename>
                <surname>Link</surname>
              </persName>
              <email type="md5">06ad8c355ad61c4399dbc9509d65a0fb</email>
              <email type="domain">auckland.ac.nz</email>
              <idno type="idhal" notation="numeric">1010044</idno>
              <idno type="halauthorid" notation="string">854842-1010044</idno>
              <affiliation ref="#struct-94586"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jan-Hendrik</forename>
                <surname>Lochner</surname>
              </persName>
              <email type="md5">4f120d94bac4f393d23314fd12161e9c</email>
              <email type="domain">cs.tu-dortmund.de</email>
              <idno type="idhal" notation="numeric">1010045</idno>
              <idno type="halauthorid" notation="string">854843-1010045</idno>
              <affiliation ref="#struct-264972"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Torsten</forename>
                <surname>Schlotmann</surname>
              </persName>
              <email type="md5">7b689a35859ad0da32e82d8624391fa7</email>
              <email type="domain">cs.tu-dortmund.de</email>
              <idno type="idhal" notation="numeric">1010046</idno>
              <idno type="halauthorid" notation="string">1178681-1010046</idno>
              <affiliation ref="#struct-264972"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-06-08 11:06:38</date>
              <date type="whenModified">2026-04-13 09:42:02</date>
              <date type="whenReleased">2017-06-08 11:09:27</date>
              <date type="whenProduced">2012-07-11</date>
              <date type="whenEndEmbargoed">2015-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01534773v1/document">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01534773v1/file/978-3-642-31540-4_5_Chapter.pdf" id="file-1534773-1595502">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-31540-4_5.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01534773</idno>
            <idno type="halUri">https://inria.hal.science/hal-01534773</idno>
            <idno type="halBibtex">biskup:hal-01534773</idno>
            <idno type="halRefHtml">&lt;i&gt;26th Conference on Data and Applications Security and Privacy (DBSec)&lt;/i&gt;, Jul 2012, Paris, France. pp.56-73, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-31540-4_5"&gt;&amp;#x27E8;10.1007/978-3-642-31540-4_5&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">26th Conference on Data and Applications Security and Privacy (DBSec), Jul 2012, Paris, France. pp.56-73, &amp;#x27E8;10.1007/978-3-642-31540-4_5&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1534773-1595502"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WG11-3" corresp="IFIP-WG">WG 11.3: Data and Application Security and Privacy</idno>
            <idno type="stamp" n="IFIP-DBSEC" corresp="IFIP">DBSec: Data and Applications Security</idno>
            <idno type="stamp" n="IFIP-LNCS-7371" corresp="IFIP-LNCS">Data and Applications Security and Privacy XXVI</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 3: Confidentiality and Privacy</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Signature-Based Inference-Usability Confinement for Relational Databases under Functional and Join Dependencies</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Joachim</forename>
                    <surname>Biskup</surname>
                  </persName>
                  <email type="md5">bc37010be860b9426206b50bf07e07b6</email>
                  <email type="domain">cs.tu-dortmund.de</email>
                  <idno type="idhal" notation="numeric">1010042</idno>
                  <idno type="halauthorid" notation="string">854841-1010042</idno>
                  <affiliation ref="#struct-264972"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sven</forename>
                    <surname>Hartmann</surname>
                  </persName>
                  <email type="md5">23afcbc60e241cd5e92006dd8d2404f2</email>
                  <email type="domain">tu-clausthal.de</email>
                  <idno type="idhal" notation="numeric">1010043</idno>
                  <idno type="halauthorid" notation="string">640846-1010043</idno>
                  <affiliation ref="#struct-1062084"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sebastian</forename>
                    <surname>Link</surname>
                  </persName>
                  <email type="md5">06ad8c355ad61c4399dbc9509d65a0fb</email>
                  <email type="domain">auckland.ac.nz</email>
                  <idno type="idhal" notation="numeric">1010044</idno>
                  <idno type="halauthorid" notation="string">854842-1010044</idno>
                  <affiliation ref="#struct-94586"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jan-Hendrik</forename>
                    <surname>Lochner</surname>
                  </persName>
                  <email type="md5">4f120d94bac4f393d23314fd12161e9c</email>
                  <email type="domain">cs.tu-dortmund.de</email>
                  <idno type="idhal" notation="numeric">1010045</idno>
                  <idno type="halauthorid" notation="string">854843-1010045</idno>
                  <affiliation ref="#struct-264972"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Torsten</forename>
                    <surname>Schlotmann</surname>
                  </persName>
                  <email type="md5">7b689a35859ad0da32e82d8624391fa7</email>
                  <email type="domain">cs.tu-dortmund.de</email>
                  <idno type="idhal" notation="numeric">1010046</idno>
                  <idno type="halauthorid" notation="string">1178681-1010046</idno>
                  <affiliation ref="#struct-264972"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>26th Conference on Data and Applications Security and Privacy (DBSec)</title>
                  <date type="start">2012-07-11</date>
                  <date type="end">2012-07-13</date>
                  <settlement>Paris</settlement>
                  <country key="FR">France</country>
                </meeting>
                <editor>Nora Cuppens-Boulahia</editor>
                <editor>Frédéric Cuppens</editor>
                <editor>Joaquin Garcia-Alfaro</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Data and Applications Security and Privacy XXVI</biblScope>
                  <biblScope unit="volume">LNCS-7371</biblScope>
                  <biblScope unit="pp">56-73</biblScope>
                  <date type="datePub">2012</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-31540-4_5</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">template dependency</term>
                <term xml:lang="en">SQL</term>
                <term xml:lang="en">inference signature</term>
                <term xml:lang="en">select-project query</term>
                <term xml:lang="en">relational database</term>
                <term xml:lang="en">refusal</term>
                <term xml:lang="en">join dependency</term>
                <term xml:lang="en">interaction history</term>
                <term xml:lang="en">inference-usability confinement</term>
                <term xml:lang="en">inference control</term>
                <term xml:lang="en">functional dependency</term>
                <term xml:lang="en">confidentiality policy</term>
                <term xml:lang="en">a priori knowledge</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Inference control of queries for relational databases confines the information content and thus the usability of data returned to a client, aiming to keep some pieces of information confidential as specified in a policy, in particular for the sake of privacy. In general, there is a tradeoff between the following factors: on the one hand, the expressiveness offered to administrators to declare a schema, a confidentiality policy and assumptions about a client’s a priori knowledge; on the other hand, the computational complexity of a provably confidentiality preserving enforcement mechanism. We propose and investigate a new balanced solution for a widely applicable situation: we admit relational schemas with functional and join dependencies, which are also treated as a priori knowledge, and select-project sentences for policies and queries; we design an efficient signature-based enforcement mechanism that we implement for an Oracle/SQL-system. At declaration time, the inference signatures are compiled from an analysis of all possible crucial inferences, and at run time they are employed like in the field of intrusion detection.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.3</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-264972" status="INCOMING">
          <orgName>Fakultät für Informatik</orgName>
          <desc>
            <address>
              <addrLine>Dortmund</addrLine>
              <country key="DE"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-133089" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1062084" status="VALID">
          <idno type="ROR">https://ror.org/04qb8nc58</idno>
          <orgName>Technische Universität Clausthal = Clausthal University of Technology</orgName>
          <orgName type="acronym">TU Clausthal</orgName>
          <desc>
            <address>
              <addrLine>Adolph-Roemer-Straße 2A, 38678 Clausthal-Zellerfeld</addrLine>
              <country key="DE"/>
            </address>
            <ref type="url">https://www.tu-clausthal.de</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-94586" status="VALID">
          <orgName>Department of Computer Science [Auckland]</orgName>
          <desc>
            <address>
              <addrLine>The University of Auckland Private Bag 92019 Auckland 1142 New Zealand</addrLine>
              <country key="NZ"/>
            </address>
            <ref type="url">http://www.cs.auckland.ac.nz/uoa/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-160272" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-133089" status="VALID">
          <idno type="ROR">https://ror.org/01k97gp34</idno>
          <orgName>Technische Universität Dortmund = TU Dortmund University</orgName>
          <orgName type="acronym">TU</orgName>
          <desc>
            <address>
              <addrLine>August-Schmidt-Straße 1, 44227 Dortmund</addrLine>
              <country key="DE"/>
            </address>
            <ref type="url">https://www.tu-dortmund.de/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-160272" status="VALID">
          <idno type="ROR">https://ror.org/03b94tp07</idno>
          <orgName>University of Auckland [Auckland]</orgName>
          <desc>
            <address>
              <addrLine>Private Bag 92019 Auckland 1142</addrLine>
              <country key="NZ"/>
            </address>
            <ref type="url">https://www.auckland.ac.nz/en.html</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>