A FCA framework for inference control in data integration systems

Sellami, Mokhtar; Hacid, Mohand-Saïd; Gammoudi, Mohamed Mohsen

doi:10.1007/s10619-018-7241-5

Cited by 4 publications

(2 citation statements)

References 53 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Both at query-time and by design, Sellami et al 15 consider inference attacks which occur in data integration systems. In such system, a single entry point provides a unique view to the distributed data.…”

Section: Multi-databasementioning

confidence: 99%

Detecting inference attacks involving sensor data in a multi‐database context: Issues & challenges

Lachat

Bennani

Rehn‐Sonigo

et al. 2022

Internet Technology Letters

View full text Add to dashboard Cite

Funding informationDeutsch-Französische Hochschule Nowadays applications produce and manage data of individual among which some may be sensitive and must be protected. Moreover, with the advent of smart applications, sensor data are produced by IoT devices in a huge quantity and sent to servers in the vicinity to be stored and processed. Meanwhile, newly discovered inference channels involving sensor data gives insights on personal data and raises new threats on individuals privacy. They escape the vigilance of traditional inference detection systems devoted to protecting personal data stored locally in a database. In this paper, we motivate the need of a distributed inference detection system acting in a general multi-database context and we highlight the issues that such a system would face.

show abstract

Section: Multi-databasementioning

confidence: 99%

Detecting inference attacks involving sensor data in a multi‐database context: Issues & challenges

Lachat

Bennani

Rehn‐Sonigo

et al. 2022

Internet Technology Letters

View full text Add to dashboard Cite

show abstract

“…They both have the same limitations as Chen et al’s solution. Sellami et al [ 25 ] focus on data integration systems where a unique view is provided to users by combining the results of a query issued to all databases. The authors consider simple FDs between attributes, their solution does not consider metadata related to the processed queries, nor temporal or spatial constraints that user’s knowledge must satisfy to exploit a FD.…”

Section: Related Workmentioning

confidence: 99%

Detecting Inference Attacks Involving Raw Sensor Data: A Case Study

Lachat

Bennani

Rehn‐Sonigo

et al. 2022

Sensors

View full text Add to dashboard Cite

With the advent of sensors, more and more services are developed in order to provide customers with insights about their health and their appliances’ energy consumption at home. To do so, these services use new mining algorithms that create new inference channels. However, the collected sensor data can be diverted to infer personal data that customers do not consent to share. This indirect access to data that are not collected corresponds to inference attacks involving raw sensor data (IASD). Towards these new kinds of attacks, existing inference detection systems do not suit the representation requirements of these inference channels and of user knowledge. In this paper, we propose RICE-M (Raw sensor data based Inference ChannEl Model) that meets these inference channel representations. Based on RICE-M, we proposed RICE-Sy an extensible system able to detect IASDs, and evaluated its performance taking as a case study the MHEALTH dataset. As expected, detecting IASD is proven to be quadratic due to huge sensor data managed and a quickly growing amount of user knowledge. To overcome this drawback, we propose first a set of conceptual optimizations that reduces the detection complexity. Although becoming linear, as online detection time remains greater than a fixed acceptable query response limit, we propose two approaches to estimate the potential of RICE-Sy. The first one is based on partitioning strategies which aim at partitioning the knowledge of users. We observe that by considering the quantity of knowledge gained by a user as a partitioning criterion, the median detection time of RICE-Sy is reduced by 63%. The second approach is H-RICE-SY, a hybrid detection architecture built on RICE-Sy which limits the detection at query-time to users that have a high probability to be malicious. We show the limits of processing all malicious users at query-time, without impacting the query answer time. We observe that for a ratio of 30% users considered as malicious, the median online detection time stays under the acceptable time of 80 , for up to a total volume of 1.2 million user knowledge entities. Based on the observed growth rates, we have estimated that for 5% of user knowledge issued by malicious users, a maximum volume of approximately 8.6 million user’s information can be processed online in an acceptable time.

show abstract