UPDATE Inferential Policy Security Control under Fine Granularity Access Control
Jincheng Zhou, Minghui Zhang · 2012
Effectively controlling the related inferential problems existing in the database system under the fine granularity access control is an important policy to protect the security of information in the database. The information reveal caused by UPDATE operation inferential problems seriously affected the database system security. The paper firstly presented the hidden trouble of UPDATE operation inferential problems, and then analyzed the UPDATE inference, presented policy level security conditions that can make the UPDATE operation inferential problems in control, and presented the method to dynamically rewrite UPDATE policy that meets the policy security conditions.