Catalytic inference analysis: detecting inference threats due to knowledge discovery

Knowledge discovery in databases can be enhanced by introducing "catalytic relations" conveying external knowledge. The new information catalyzes database inference, manifesting latent channels. Catalytic inference is imprecise in nature, but the granularity of inference may be fine enough to create security compromises. Catalytic inference is computationally intensive. However, it can be automated by advanced search engines that gather and assemble knowledge from information repositories. The relentless information gathering potential of such search engines makes them formidable security threats. This paper presents a formalism for modeling and analyzing catalytic inference in "mixed" databases containing various precise, imprecise and fuzzy relations. The inference formalism is flexible and robust, and well-suited to implementation.

[1]  Arie Tzvieli Possibility theory: An approach to computerized processing of uncertainty , 1990, J. Am. Soc. Inf. Sci..

[2]  Leoan J. Buczkowski Database Inference Controller , 1989, Database Security.

[3]  Peter D. Karp,et al.  Detection and elimination of inference channels in multilevel relational database systems , 1993, Proceedings 1993 IEEE Computer Society Symposium on Research in Security and Privacy.

[4]  Arun K. Majumdar,et al.  Fuzzy Functional Dependencies and Lossless Join Decomposition of Fuzzy Relational Database Systems , 1988, ACM Trans. Database Syst..

[5]  Randall P. Wolf,et al.  ILIAD: an integrated laboratory for inference analysis and detection , 1996 .

[6]  Thomas H. Hinke,et al.  Inference aggregation detection in database management systems , 1988, Proceedings. 1988 IEEE Symposium on Security and Privacy.

[7]  Philip K. Chan,et al.  Systems for Knowledge Discovery in Databases , 1993, IEEE Trans. Knowl. Data Eng..

[8]  Wojciech Ziarko,et al.  The Discovery, Analysis, and Representation of Data Dependencies in Databases , 1991, Knowledge Discovery in Databases.

[9]  Gultekin Özsoyoglu,et al.  Controlling FD and MVD Inferences in Multilevel Relational Database Systems , 1991, IEEE Trans. Knowl. Data Eng..

[10]  Teresa F. Lunt Aggregation and inference: facts and fallacies , 1989, Proceedings. 1989 IEEE Symposium on Security and Privacy.

[11]  Matthew Morgenstern,et al.  Security and inference in multilevel database and knowledge-base systems , 1987, SIGMOD '87.

[12]  Harry S. Delugach,et al.  Aerie: An Inference Modeling and Detection Approach for Databases , 1993, DBSec.

[13]  Sujeet Shenoi,et al.  On Classicalizing Fuzzy Databases , 1995 .

[14]  Claudia Testemale,et al.  Fuzzy relational databases—a key to expert systems , 1986 .

[15]  Teresa F. Lunt,et al.  Cover Stories for Database Security , 1991, DBSec.

[16]  Sujeet Shenoi,et al.  A Practical Formalism for Imprecise Inference Control , 1994, DBSec.

[17]  L. Zadeh Fuzzy sets as a basis for a theory of possibility , 1999 .

[18]  Didier Dubois,et al.  Possibility Theory - An Approach to Computerized Processing of Uncertainty , 1988 .

[19]  B. Buckles,et al.  A fuzzy representation of data for relational databases , 1982 .