数据起源安全研究综述  

Survey of data provenance security

作　　者：石丽波 孙连山[1] 王艺星[1] 

机构地区：[1]陕西科技大学电气与信息工程学院计算机系,西安710021

出　　处：《计算机应用研究》2017年第1期1-7,共7页Application Research of Computers

基　　金：国家自然科学青年基金资助项目(61202019);陕西省教育厅自然科学专项基金资助项目(14JK1098)

摘　　要：数据起源是描述数据来源及其所经历处理过程的元数据,起源安全是制约起源技术大规模应用的关键瓶颈。为推动起源安全研究,从完整性、机密性和可用性三方面分析了起源安全的内涵;介绍了目前广受关注的起源安全机制:起源过滤和起源感知的访问控制,分别分析了这两类起源安全机制的主要特征,并对比了现有工作的优点和不足;最后指出了起源安全研究的发展方向。Data provenance is a kind of historical meta-data that describes the origins or pedigrees of data items, data processing activities, and agents that associated with data or activities. Provenance security is the key bottleneck of adopting provenance related technologies in real world. To advance provenance security research, this paper first analyzed the essence of provenance security in terms of its integrity, confidentiality, and availability. Then it introduced existing works related to two typical provenance security mechanisms： provenance sanitization and provenance-aware access control. It identified critical features of the two typical mechanisms and discussed their merits and shortcomings. Finally, it presented the future directions of provenance security research.

关 键 词：数据起源 信息安全 起源过滤 访问控制 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]