NDLI: Finding the Leak: A Privacy Audit System for Sensitive XML Databases

Content Provider	IEEE Xplore Digital Library
Author	Bottcher, S. Steinmetz, R.
Copyright Year	2006
Description	Author affiliation: University of Paderborn, Germany (Bottcher, S.)
Abstract	Whenever private information that is legally used by multiple employees of a company has been illegally exposed to a third party, it is of significant importance to the concerned company to find the information leak in its staff for a variety of reasons, e.g., to keep confidence of its customers. In this paper, we present a privacy audit system for XML databases and the XPath query language which uses the concept of an audit query to describe the secret information. For a given audit query, our system returns a set of suspicious user queries that may have used the secret information. Suspicious user queries are identified in a sequence of four steps: first, a static analysis based on the time constraints; second, a comparison of the nodename tests of the audit query and the user queries; third, an analysis of the associations of the node-name tests found in the audit query and in the user queries; and finally, a test on historic data. Furthermore, we discuss privacy violation detection in case of an attacker who submits multiple queries and externally compares the results.
Starting Page	100
Ending Page	100
File Size	345514
Page Count	1
File Format	PDF
ISBN	0769525717
DOI	10.1109/ICDEW.2006.61
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-04-03
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Data privacy Hospitals Data security XML Medical treatment US Department of Transportation Time factors Database languages Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Detecting Suspicious Relational Database Queries

Securing Queries to Outsourced XML Databases

Privacy-Aware Access Control in XML Databases

Researches on Integrating Database Access Control and Privacy Protection

The medical query language

A Privacy Preserving System for Cloud Computing

An Approach to Construct Secure View for XML

Privacy technology lessons from healthcare

High performance and scalable client-based access control model for XML databases

Finding the Leak: A Privacy Audit System for Sensitive XML Databases

Similar Documents

Detecting Suspicious Relational Database Queries

Securing Queries to Outsourced XML Databases

Privacy-Aware Access Control in XML Databases

Researches on Integrating Database Access Control and Privacy Protection

The medical query language

A Privacy Preserving System for Cloud Computing

An Approach to Construct Secure View for XML

Privacy technology lessons from healthcare

High performance and scalable client-based access control model for XML databases

Finding the Leak: A Privacy Audit System for Sensitive XML Databases