TY - GEN
T1 - Don't reveal my intension
T2 - 16th European Symposium on Research in Computer Security, ESORICS 2011
AU - Farnan, Nicholas L.
AU - Lee, Adam J.
AU - Chrysanthis, Panos K.
AU - Yu, Ting
PY - 2011
Y1 - 2011
N2 - In a centralized setting, the declarative nature of SQL is a major strength: a user can simply describe what she wants to retrieve, and need not worry about how the resulting query plan is actually generated and executed. However, in a decentralized setting, two query plans that produce the same result might actually reveal vastly different information about the intensional description of a user's query to the servers participating its evaluation. In cases where a user considers portions of her query to be sensitive, this is clearly problematic. In this paper, we address the specification and enforcement of querier privacy constraints on the execution of distributed database queries. We formalize a notion of intensional query privacy called (I,A)-privacy, and extend the syntax of SQL to allow users to enforce strict (I,A)-privacy constraints or partially ordered privacy/performance preferences over the execution of their queries.
AB - In a centralized setting, the declarative nature of SQL is a major strength: a user can simply describe what she wants to retrieve, and need not worry about how the resulting query plan is actually generated and executed. However, in a decentralized setting, two query plans that produce the same result might actually reveal vastly different information about the intensional description of a user's query to the servers participating its evaluation. In cases where a user considers portions of her query to be sensitive, this is clearly problematic. In this paper, we address the specification and enforcement of querier privacy constraints on the execution of distributed database queries. We formalize a notion of intensional query privacy called (I,A)-privacy, and extend the syntax of SQL to allow users to enforce strict (I,A)-privacy constraints or partially ordered privacy/performance preferences over the execution of their queries.
UR - http://www.scopus.com/inward/record.url?scp=80052990641&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-23822-2_34
DO - 10.1007/978-3-642-23822-2_34
M3 - Conference contribution
AN - SCOPUS:80052990641
SN - 9783642238215
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 628
EP - 647
BT - Computer Security, ESORICS 2011 - 16th European Symposium on Research in Computer Security, Proceedings
PB - Springer Verlag
Y2 - 12 September 2011 through 14 September 2011
ER -