Abstract-In this paper we present an approach for investigating the feasibility of reducing inference control to access control, as the latter is a more desirable means of preventing unauthorized access to sensitive data. Access control is preferable over inference control in terms of efficiency, but it fails to offer confidentiality in the presence of inference channels. We argue that during the design phase of a data schema and the definition of user roles, inference channels should be considered. An approach is introduced that can be integrated into a risk assessment exercise to assist in determining the roles and/or attributes that lower the risks associated with information disclosure from inference. The residual risk from the remaining inference channels could be treated by well known inference control mechanisms.
Katos, Vrakas, and Katsaros REF proposed an approach to reduce inference control to access control, where they consider the probabilistic correlation between attributes in the inference channel.
A Framework for Access Control with Inference Constraints
2011 IEEE 35th Annual Computer Software and Applications Conference
2011 IEEE 35th Annual Computer Software and Applications Conference
Computer Science