A Framework for Access Control with Inference Constraints

A Framework for Access Control with Inference Constraints,10.1109/COMPSAC.2011.45,Vasilios Katos,Dimitrios Vrakas,Panagiotis Katsaros

A Framework for Access Control with Inference Constraints  
BibTex | RIS | RefWorks Download
In this paper we present an approach for investigating the feasibility of reducing inference control to access control, as the latter is a more desirable means of preventing unauthorized access to sensitive data. Access control is preferable over inference control in terms of efficiency, but it fails to offer confidentiality in the presence of inference channels. We argue that during the design phase of a data schema and the definition of user roles, inference channels should be considered. An approach is introduced that can be integrated into a risk assessment exercise to assist in determining the roles and/or attributes that lower the risks associated with information disclosure from inference. The residual risk from the remaining inference channels could be treated by well known inference control mechanisms. Keywords-access control; inference control;
Cumulative Annual
View Publication
The following links allow you to view full publications. These links are maintained by other sources not affiliated with Microsoft Academic Search.