Research On Inference Problems In Secure Database

Inference control problem of secure database is an important research area in information security domain. The security of the common commercial database should be enough for general enterprises, but it isn’t enough for some special departments such as army and government. So we must study the special database to guarantee the absolute security of their information, and we call it secure database. The foreign study on secure database has been already riper, and has released the relevant products, but the domestic study on secure database is still very unripe. We must study our own secure database.On the basis of previous research results and the study of information extraction theory, this paper presents a security mechanism based on MAC. First we present an integrated security mechanism, called the Disclosure Monitor. And we develop actual inference algorithms for data-dependent disclosures for a highly expressive family of Horn-clause constraints.Then lead in update state, we guarantees data confidentiality by extending an mandatory access control mechanism (MAC) with the integrated security mechanism called Dynamic Disclosure Monitor (D2Mon). D2Mon extends the functionality of Disclosure Monitor (DiMon) to address database updates while preserving the soundness and completeness properties of inference algorithms. We develop a mechanism, called Update Consolidator (UpCon), that propagates updates to a history file to ensure that no query is rejected based on inferences derived from outdated data. We show that D2Mon guarantees confidentiality and maximal availability even in the presence of updates.