An inference is the process of transforming unclassified data values into confidential information. Previous research has studied the use of statistical aggregates to deduce individual data values. Other types of inference are possible. Obscure correlations may be possible from an expert knowledge of the population. Inferences may be formed from obvious facts about the world. Expert users of a database management system may infer data values from variables in the system performance. As a counter-measure, system management must consider these variables and correlations while formulating system security policy. (ERA citation 09:045302)
展开▼
