Data and Applications Security Developments and Directions

1. Data and Applications Security Developments and Directions Dr. Bhavani Thuraisingham The University of Texas at Dallas Lecture #12 Inference Problem - II September 24, 2010

2. Outline • Security Constraint Processing • Use of Conceptual Structures

3. Security Constraint Processing • Security Constraints are rules that assign security levels to the data • MLS/DBMS is augmented with an Inference Engine • Inference Engine is the Inference Controller • Integrated Architecture for Security Constraint processing • Query, Update and Database design operations

4. Inference Engine Approach

5. Constraint Generation

6. Query Processor

7. Update Processor

8. Database Design Tool

9. Integrated Architecture

10. Release Control Management

11. Use of Conceptual Structures • Use conceptual structures to model the application • E.g., semantic data models, semantic nets, conceptual graphs, etc. • Use the reasoning strategy of the conceptual structure and determine if security violation via inference can occur

12. Multilevel Semantic Nets

13. Complex Multilevel Semantic Net Italy Destination 20 years India Mediterranean Sea Skills Location REAGAN Smith Captain Date 16 June 2000 Skills Carries SUN Explosive Battle Passengers Management Type

14. ISA/AKO Links

15. AKO AKO AKO AKO WATER WATER SHIPS SHIP SHIP SHIPS VEHICLE VEHICLE WEAPONS WEAPONS VEHICLE VEHICLE (a) (a) AKO AKO AKO AKO Has Captain Has Captain WATER WATER SHIPS SHIP SHIP SHIPS VEHICLE VEHICLE WEAPONS WEAPONS PERSON PERSON (b) (b) Has Captain Has Captain ISA AKO REAGAN SHIPS SHIP WATER WEAPONS VEHICLE (c) ISA Example Rules - II

16. ISA ISA Has Captain Has Captain SHIP SHIP SHIPS SHIPS REAGAN REAGAN WEAPONS WEAPONS PERSON PERSON (d) (d) Has Captain Has Captain Destination ISA India SHIPS REAGAN WEAPONS COUNTRY (e) Destination Example Rules - II

17. Applying Transfer Rules India Destination Mediterranean Sea India Mediterranean Sea (b) Location REAGAN Location REAGAN Smith Carries (a) Carries Skills Type SUN Explosive Type Battle SUN Explosive Management Destination India Mediterranean Sea Location REAGAN Smith (c) Combines (a) and (b) Carries Skills Type Battle SUN Explosive Management

18. Security Constraints Carries Carries SHIPS SHIPS REAGAN REAGAN WEAPONS SUN SUN WEAPONS (a) (a) Mediterranean Mediterranean Location Carries Carries SHIPS SHIPS REAGAN REAGAN SUN SUN (b) (b) Destination Destination COUNTRY COUNTRY

19. Security Constraint Violation - I

20. Security Constraint Violation - II

21. Universal and Existential Conditionals

22. Matching Vectors

23. Matching and Binding India Destination Location Mediterranean SHIP: ALL X (a) Destination Carries New Delhi India Mediterranean Sea Explosive WEAPONS: SOME Y Destination Capital Capital Type Location REAGAN Smith Captain (b) FLORIDA FLORIDA New Delhi India Skills Mediterranean Sea Destination Carries Carries Capital Carries Battle Location SUN Explosive MOON MOON REAGAN Management Smith Type Type Captain Type FLORIDA Skills Carries (c ) Results from (a) and (b) (c ) Results from (a) and (b) Carries Battle SUN Explosive MOON Management Type Type

24. Negative Statements

25. Refutation LOCATION FLORIDA REAGAN SHIPS SHIPS WEAPONS REAGAN Pacific Ocean WEAPONS DESTINATION DESTINATION (a) (b) Australia Australia WEAPONS WEAPONS FLORIDA FLORIDA REAGAN REAGAN WEAPONS WEAPONS SHIPS SHIPS DESTINATION REAGAN SHIPS Australia WEAPONS LOCATION DESTINATION X X Pacific Ocean Pacific Ocean (c ) Australia Australia WEAPONS WEAPONS (d) FLORIDA SHIPS WEAPONS REAGAN LOCATION DESTINATION Australia Pacific Ocean WEAPONS WEAPONS (e)

26. Directions • Inference problem is still being investigated • Census bureau still working on statistical databases • Need to find real world examples in the Military world • Inference problem with respect to medial records • Much of the focus is now on the Privacy problem • Privacy problem can be regarded to be a special case of the inference problem