1. Data and Applications Security Developments and Directions Dr. Bhavani Thuraisingham The University of Texas at Dallas Lecture #1 Introduction to Data and Applications Security January 11, 2005

2. Outline l Data and Applications Security - Developments and Directions l Secure Semantic Web - XML Security; Other directions l Some Emerging Secure DAS Technologies - Secure Information Integration; Secure Sensor Information Management; Secure Dependable Information Management l Some Directions for Privacy - Data Mining for handling security problems; Privacy vs. National Security; Privacy Constraint Processing; Foundations of the Privacy Problem l What are the Challenges? l Outline of the Course

3. Developments in Data and Applications Security: 1975 - Present l Access Control for Systems R and Ingres (mid 1970s) l Multilevel secure database systems (1980 – present) - Relational database systems: research prototypes and products; Distributed database systems: research prototypes and some operational systems; Object data systems; Inference problem and deductive database system; Transactions l Recent developments in Secure Data Management (1996 – Present) - Secure data warehousing, Role-based access control (RBAC); E- commerce; XML security and Secure Semantic Web; Data mining for intrusion detection and national security; Privacy; Dependable data management; Secure knowledge management and collaboration

4. Developments in Data and Applications Security: Multilevel Secure Databases - I l Air Force Summer Study in 1982 l Early systems based on Integrity Lock approach l Systems in the mid to late 1980s, early 90s - E.g., Seaview by SRI, Lock Data Views by Honeywell, ASD and ASD Views by TRW - Prototypes and commercial products - Trusted Database Interpretation and Evaluation of Commercial Products l Secure Distributed Databases (late 80s to mid 90s) - Architectures; Algorithms and Prototype for distributed query processing; Simulation of distributed transaction management and concurrency control algorithms; Secure federated data management

5. Developments in Data and Applications Security: Multilevel Secure Databases - II l Inference Problem (mid 80s to mid 90s) - Unsolvability of the inference problem; Security constraint processing during query, update and database design operations; Semantic models and conceptual structures l Secure Object Databases and Systems (late 80s to mid 90s) - Secure object models; Distributed object systems security; Object modeling for designing secure applications; Secure multimedia data management l Secure Transactions (1990s) - Single Level/ Multilevel Transactions; Secure recovery and commit protocols

6. Some Directions and Challenges for Data and Applications Security - I l Secure semantic web - Single/multiple security models? - Different application domains l Secure Sensor Information Management - Fusing and managing data/information from distributed and autonomous sensors l Secure Dependable Information Management - Integrating Security, Real-time Processing and Fault Tolerance l Data Sharing vs. Privacy - Federated database architectures?

7. Some Directions and Challenges for Data and Applications Security - II l Data mining and knowledge discovery for intrusion detection - Need realistic models; real-time data mining l Secure knowledge management - Protect the assets and intellectual rights of an organization l Information assurance, Infrastructure protection, Access Control - Insider cyber-threat analysis, Protecting national databases, Role-based access control for emerging applications l Security for emerging applications - Geospatial, Biomedical, E-Commerce, etc. l Other Directions - Trust and Economics, Trust Management/Negotiation, Secure Peer-to-peer computing, Biometrics

8. Secure Semantic Web l According to Tim Berners Lee, The Semantic Web supports - Machine readable and understandable web pages l Layers for the semantic web: Security cuts across all layers XML, XML Schemas Rules/Query Logic, Proof and Trust TRUSTTRUST Other Services RDF, Ontologies URI, UNICODE PRIVACYPRIVACY

9. Steps to Securing the Semantic Web l Flexible Security Policy - One that can adapt to changing situations and requirements l Security Model - Access Control, Role-based security, Nonrepudiation, Authentication l Security Architecture and Design - Examine architectures for semantic web and identify security critical components l Securing the Layers of the Semantic Web - Secure agents, XML security, RDF security, secure semantic interoperabiolity, security properties for ontologies, Security issues for digital rights

10. XML Security l Some ideas have evolved from research in secure multimedia/object data management l Access control and authorization models - Protecting entire documents, parts of documents, propagations of access control privileges; Protecting DTDs vs Document instances; Secure XML Schemas l Update Policies and Dissemination Policies l Secure publishing of XML documents - How do you minimize trust for third party publication l Use of Encryption l Inference problem for XML documents - Portions of documents taken together could be sensitive, individually not sensitive

11. What are the Next Steps and Challenges for Secure Semantic Web? l We need to continue with XML security research as well as work with standards - W3C standards are advancing rapidly; security research, prototypes and products must keep up with the developments - Researchers, vendors and standards organizations must work together l Secure XML Database Systems (query, transactions, storage, - - -) l RDF Security - When you bring in semantics, many challenges for security - Need to develop security models for RDF documents l Secure Ontologies - Two aspects; one is to develop protection models for Ontology databases; other is to use ontologies for ensuring security and privacy

12. Secure Sensor Information Management l Sensor network consists of a collection of autonomous and interconnected sensors that continuously sense and store information about some local phenomena - May be employed in battle fields, seismic zones, pavements l Data streams emanate from sensors; for geospatial applications these data streams could contain continuous data of maps, images, etc. Data has to be fused and aggregated l Continuous queries are posed, responses analyzed possibly in real- time, some streams discarded while rest may be stored l Recent developments in sensor information management include sensor database systems, sensor data mining, distributed data management, layered architectures for sensor nets, storage methods, data fusion and aggregation l Secure sensor data/information management has received very little attention; need a research agenda

13. Secure Sensor Information Management: Directions l Individual sensors may be compromised and attacked; need techniques for detecting, managing and recovering from such attacks l Aggregated sensor data may be sensitive; need secure storage sites for aggregated data; variation of the inference and aggregation problem? l Security has to be incorporated into sensor database management - Policies, models, architectures, queries, etc. l Evaluate costs for incorporating security especially when the sensor data has to be fused, aggregated and perhaps mined in real-time

14. Secure Dependable Information Management l Dependable information management includes - secure information management - fault tolerant information - High integrity and high assurance computing - Real-time computing l Conflicts between different features - Security, Integrity, Fault Tolerance, Real-time Processing - E.g., A process may miss real-time deadlines when access control checks are made - Trade-offs between real-time processing and security - Need flexible security policies; real-time processing may be critical during a mission while security may be critical during non-operational times

15. Secure Dependable Information Management Example: Next Generation AWACS Technology provided by the project Hardware Display Processor & Refresh Channels Consoles (14) Navigation Sensors Data Links Data Analysis Programming Group (DAPG) Future App Future App Future App Multi-Sensor Tracks Sensor Detections MSI App Data Mgmt. Data Xchg. Infrastructure Services Security being considered after the system has been designed and prototypes implemented Challenge: Integrating real-time processing, security and fault tolerance Real-time Operating System

16. Directions for Privacy l Why this interest now on privacy? - Data Mining for National Security - Data Mining is a threat to privacy - Balance between data sharing/mining and privacy l Is federated data management a solution l Privacy Preserving Data Mining l Inference Problem as a Privacy Problem - Handling privacy constraints; Foundations l Web/Semantic Web will have to address privacy l Federated Architectures for Data Sharing?

17. Data Mining to Handle Security Problems l Data mining tools could be used to examine audit data and flag abnormal behavior l Much recent work in Intrusion detection - e.g., Neural networks to detect abnormal patterns l Tools are being examined to determine abnormal patterns for national security - Classification techniques, Link analysis l Fraud detection - Credit cards, calling cards, identity theft etc.

18. Data Mining as a Threat to Privacy l Data mining gives us “facts” that are not obvious to human analysts of the data l Enables inspection and analysis of huge amounts of data l Possible threats: - Predict information about classified work from correlation with unclassified work - Mining “Open Source” data to determine predictive events (e.g., Pizza deliveries to the Pentagon) It isn’t the data we want to protect, but correlations among data items Initial ideas presented at the IFIP 11.3 Database Security Conference, July 1996 in Como, Italy Data Sharing/Mining vs. Privacy: Federated Data Management Architecture for the Department of Homeland Security?

19. What can we do?: Privacy Preserving Data Mining l Prevent useful results from mining - limit data access to ensure low confidence and support - Extra data (“cover stories”) to give “false” results with Providing only samples of data can lower confidence in mining results; l Idea: If adversary is unable to learn a good classifier from the data, then adversary will be unable to learn good - rules, predictive functions l Approach: Only make a sample of data available - Limits ability to learn good classifier l Several recent research efforts have been reported

20. Privacy Constraints l Simple Constraints - an attribute of a document is private l Content-based constraints: If document contains information about XXX, then it is private l Association-based Constraints: Two or more documents together is private; individually they are public l Dynamic constraints: After some event, the document is private or becomes public l Several challenges: Specification and consistency of constraints is a Challenge; How do you take into consideration external knowledge? Managing history information

21. Architecture for Privacy Constraint Processing User Interface Manager Constraint Manager Privacy Constraints Query Processor: Constraints during query and release operations Update Processor: Constraints during update operation Database Design Tool Constraints during database design operation Database DBMS

22. Federated Data and Policy Management Export Data/Policy Component Data/Policy for Agency A Data/Policy for Federation Export Data/Policy Component Data/Policy for Agency C Component Data/Policy for Agency B Export Data/Policy

23. Some Key Directions l Transfer security technology to operational systems; need to develop systems that are flexible, usable and secure - Bring human computer interaction and people aspects into system design l Security for emerging applications - E.g., medical informatics, bioinformatics, scientific and engineering informatics, and other areas l Data mining for security (e.g., intrusion detection, insider cyber threat); cannot forget about Privacy l Interdisciplinary research in information security l Emerging areas include Secure semantic web, Secure Information Integration, Secure Sensors, Trust Management/Negotiation, Economics, - - - - -

24. Outline of Course l Supporting Technologies l Discretionary Security l Multilevel Security l Inference Problem l Secure Distributed Databases l Secure Object Systems l Secure Data warehouses l Data Mining and security l Privacy l Secure Multimedia and Information Management l Secure Knowledge Management l Secure Semantic Web l Secure Dependable Information Management l Special Topics: Biometrics, Digital identity, - - -