MAC in Database Systems

• Information leakage

  • Inference channels
    • Values of one or more attributes determine (exactly or inexactly) the value of another
      • Rank, Department ? Salary (inexact inference)
    • Data association
      • The association of two or more attributes may be more sensitive than any one alone
        • Name, Salary

• Capabilities of current systems limited

Previous slide

Next slide

Back to first slide

View graphic version