Inference Policy

It is very essential to protect data at a specific level. It can be applied when analysis of particular data in the form of facts are required to be prevented at a certain higher security level. It helps to determine how to protect information from being released. The aim of the inference control is to avoid indirect disclosure of information.

Generally there are three ways to unauthorized data disclosures :

1. Correlated data - typical channel when visible data X are semantically related with invisible data Y.

2. Missing data - result of query contains NULL values that mask sensitive data. Existence of that data may by detect that way.

3. Statistical inference - typical for databases that provide statistical information about entities.

How inference policy in database security work.

Types of Access Control

1. Discretionary Access Control (DAC)

2. Mandatory Access Control (MAC)

3. Role Based Access Control (RBAC)

4. Attribute Based Access Control (ABAC)