CRII: SaTC: Preventing inferences in databases through Dependency-Aware Access Control

NSF Award Search · 01002526DB NSF RESEARCH & RELATED ACTIVIT · $174,991 · view on nsf.gov ↗

Abstract

Fine-grained access control policies define what data is sensitive or non-sensitive in a database. While these policies guard against direct access to sensitive data, attackers can still make guesses (or inferences) about sensitive data using non-sensitive data and data dependencies. Data dependencies, or simply dependencies, specify relationships between items within a database. For example, in an employee database, a data dependency could say that two employees with the same role and years of experience make the same salary. Such a dependency could be used to infer sensitive data, in this example an individual's salary. Detecting such inferences and protecting against them is critical to prevent attackers from learning about sensitive data items. This project will develop a novel approach to protect against dependency-based attacks while ensuring that databases can still answer queries quickly. This project's approach to enhancing access control will have a significant impact on how cybersecurity is implemented in social networks, healthcare, and other domains. This project will also support a cohort of PhD and undergraduate students and will be tightly integrated into databases and privacy courses at Portland State University. Detecting and preventing inferences due to data dependencies is challenging as the number of inference channels per sensitive data item and dependency are proportional to the size of the database. The dynamic nature of data and related dependenc

Key facts

NSF award ID
2451803
Awardee
Portland State University (OR)
SAM.gov UEI
H4CAHK2RD945
PI
Primal Pappachan
Primary program
01002526DB NSF RESEARCH & RELATED ACTIVIT
All programs
CISE Resrch Initiatn Initiatve, SaTC: Secure and Trustworthy Cyberspace
Estimated total
$174,991
Funds obligated
$174,991
Transaction type
Standard Grant
Period
10/01/2025 → 09/30/2027