基于推理通道的函数依赖推理控制  

The Inference Control of Functional Dependency Based on Inference Channel

作　　者：徐岩[1] 马骏[2] 何清法[2] 车玫[2] 

机构地区：[1]北京信息控制研究所,北京100037 [2]北京神舟航天软件技术有限公司,北京100036

出　　处：《计算机仿真》2008年第1期88-91,215,共5页Computer Simulation

基　　金：国家863高技术研究发展计划(2005AA4Z3020)

摘　　要：数据库推理控制是数据库安全领域的重要研究内容。函数依赖关系在推理攻击中通常会起到重要作用。文中对基于函数依赖关系的推理控制问题进行了研究,在推理通道思想的基础上,提出了一种基于最小函数依赖集构造推理通道的方法,以及一种基于推理通道的动态组合通道实例的方法,实现了在数据库运行阶段针对函数依赖关系的动态推理控制。上述方法已应用于国产数据库神舟OSCAR安全版中,实践表明,上述方法能够有效地防御基于函数依赖关系的推理攻击。Inference control is an important domain of database security. Generally speaking, functional dependency plays an important role in inference attack. This paper studies the inference control problem based on functional dependency, and then presents a method of constructing inference channels based on minimal functional dependency set, and another method of combining the instance of inference channel dynamically based on the idea of inference channel, which achieve the goal of dynamic inference control of functional dependency. The methods above mentioned have been applied to Sbenzhou OSCAR Secure Database, and the validity of defense against the inference attack based on functional dependency has been testified.

关 键 词：数据库安全 推理控制 推理通道 函数依赖 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]