Whodunit: An Auditing Tool for Detecting Data Breaches

Commercial database systems provide support to maintain an audit trail that can be analyzed offline to identify potential threats to data security. The authors present a tool that performs data auditing that asks for an audit trail of all users and queries that referenced sensitive data, for example "Find all queries and corresponding users that referenced John Doe's salary in the last six months". Their tool: handles complex SQL queries including constructs such as grouping, aggregation and subqueries, has privacy guarantees, and incorporates novel optimization techniques for efficiently auditing a large workload of complex SQL queries.

Provided by: VLD Digital Topic: Data Management Date Added: Sep 2011 Format: PDF

Find By Topic