Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

New software improves database security

11.11.2004


Penn State researchers have developed software that more quickly and efficiently ensures that databases don’t release unauthorized information.



The software, QFilter, "sits" between users and databases and filters or culls out unauthorized requests for data before a database responds to a query. "We have shifted the thinking from data filtering to query filtering," said Dongwon Lee, assistant professor in the School of Information Sciences and Technology (IST). "This is a practical solution to the ongoing problem of database access controls."

Businesses and organizations know a critical security guarantee for their databases is that only authorized users can access approved data. That security is managed currently through access control-modules built separately into individual databases. QFilter can implement database security without those modules. This means it can be used with off-the-shelf databases and without requiring substantial changes to existing databases, the researchers said. "That difference not only makes the security check of QFilter very practical, but it also significantly improves query-response time by rejecting unauthorized requests early on," Lee said.


The technology is discussed in a paper titled "QFilter: Fine-Grained Run-Time XML Access Control via NFA-based Query Rewriting" presented today (Nov. 11) at the ACM Conference on Information and Knowledge Management in Washington, D.C. Lee’s co-authors are Bo Luo, an IST doctoral student; Peng Liu, an assistant professor of information sciences and technology in IST; and Wang-Chien Lee, an associate professor in the department of Computer Science and Engineering.

Other technologies for restricting access to databases exist. One popular technique is view-based technology which creates different data views for each user. Once the views are created, the database no longer has to check users’ credentials, so there is a speed advantage. But as the number of users requesting access grows or views need to be updated frequently, this technology will have maintenance and storage issues, the researchers said. "The issues are what technology is the fastest, what requires the least storage and what requires the least amount of changes to existing databases," Lee said. "Compared to competing techniques, QFilter is better on all three."

To capture and determine who can access what information, QFilter uses a specialized model of computation known as non-deterministic finite automata (NFA). NFA stores a large number of access control policies in an efficient and non-redundant fashion. NFA monitors when users’ queries pass through and filters out parts of queries asking for unauthorized access.

Work on QFilter continues as the software is not in its final version, said Lee who anticipates developing other applications for QFilter.

Margaret Hopkins | EurekAlert!
Further information:
http://www.psu.edu

More articles from Information Technology:

nachricht Putting food-safety detection in the hands of consumers
15.11.2018 | Massachusetts Institute of Technology

nachricht Next stop Morocco: EU partners test innovative space robotics technologies in the Sahara desert
09.11.2018 | Deutsches Forschungszentrum für Künstliche Intelligenz GmbH, DFKI

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: UNH scientists help provide first-ever views of elusive energy explosion

Researchers at the University of New Hampshire have captured a difficult-to-view singular event involving "magnetic reconnection"--the process by which sparse particles and energy around Earth collide producing a quick but mighty explosion--in the Earth's magnetotail, the magnetic environment that trails behind the planet.

Magnetic reconnection has remained a bit of a mystery to scientists. They know it exists and have documented the effects that the energy explosions can...

Im Focus: A Chip with Blood Vessels

Biochips have been developed at TU Wien (Vienna), on which tissue can be produced and examined. This allows supplying the tissue with different substances in a very controlled way.

Cultivating human cells in the Petri dish is not a big challenge today. Producing artificial tissue, however, permeated by fine blood vessels, is a much more...

Im Focus: A Leap Into Quantum Technology

Faster and secure data communication: This is the goal of a new joint project involving physicists from the University of Würzburg. The German Federal Ministry of Education and Research funds the project with 14.8 million euro.

In our digital world data security and secure communication are becoming more and more important. Quantum communication is a promising approach to achieve...

Im Focus: Research icebreaker Polarstern begins the Antarctic season

What does it look like below the ice shelf of the calved massive iceberg A68?

On Saturday, 10 November 2018, the research icebreaker Polarstern will leave its homeport of Bremerhaven, bound for Cape Town, South Africa.

Im Focus: Penn engineers develop ultrathin, ultralight 'nanocardboard'

When choosing materials to make something, trade-offs need to be made between a host of properties, such as thickness, stiffness and weight. Depending on the application in question, finding just the right balance is the difference between success and failure

Now, a team of Penn Engineers has demonstrated a new material they call "nanocardboard," an ultrathin equivalent of corrugated paper cardboard. A square...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

VideoLinks
Industry & Economy
Event News

“3rd Conference on Laser Polishing – LaP 2018” Attracts International Experts and Users

09.11.2018 | Event News

On the brain’s ability to find the right direction

06.11.2018 | Event News

European Space Talks: Weltraumschrott – eine Gefahr für die Gesellschaft?

23.10.2018 | Event News

 
Latest News

Purdue cancer identity technology makes it easier to find a tumor's 'address'

16.11.2018 | Health and Medicine

Good preparation is half the digestion

16.11.2018 | Life Sciences

Microscope measures muscle weakness

16.11.2018 | Life Sciences

VideoLinks
Science & Research
Overview of more VideoLinks >>>