Welcome to the ADMT Publication Server

Enabling Intensional Access Control via Preference-aware Query Optimization

DocUID: 2013-002 Full Text: PDF

Author: Nicholas L. Farnan, Adam J. Lee, Panos K. Chrysanthis, Ting Yu

Abstract: Although the declarative nature of SQL provides great utility to database users, its use in distributed database management systems can result in unintended consequences to user privacy over the course of query evaluation. By allowing users to merely say what data they are interested in accessing without providing guidance regarding how to retrieve it, query optimizers can generate plans that leak sensitive query intension. To address these types of issues, we have created a framework that empowers users with the ability to specify access controls on the intension of their queries through extensions to the SQL SELECT statement. In this demonstration, we present a version of PostgreSQL’s query optimizer that we have modified to produce plans that respect these constraints while optimizing user-specified SQL queries in terms of performance.

Keywords: Privacy Optimization

Published In: Symposium on Access Control Models and Technologies

Pages: 189-192

Place Published: Amsterdam, The Netherlands

Year Published: 2013

Project: PAQO Subject Area: Data Privacy

Publication Type: Demonstration

Sponsor: Others, NSF CNS-0747247, NSF CNS-0964295, NSF CCF-0916015, NSF OIA-1028162

Citation:Text Latex BibTex XML Nicholas L. Farnan, Adam J. Lee, Panos K. Chrysanthis, and Ting Yu. Enabling Intensional Access Control via Preference-aware Query Optimization. Symposium on Access Control Models and Technologies. 189-192. 2013. Amsterdam, The Netherlands.