Featured Research

from universities, journals, and other organizations

New Software Developed By Penn State Improves Database Security

Date:
December 6, 2004
Source:
Penn State
Summary:
Penn State researchers have developed software that more quickly and efficiently ensures that databases don't release unauthorized information. The software, QFilter, "sits" between users and databases and filters or culls out unauthorized requests for data before a database responds to a query.

University Park, Pa. -- Penn State researchers have developed software that more quickly and efficiently ensures that databases don't release unauthorized information.

Related Articles


The software, QFilter, "sits" between users and databases and filters or culls out unauthorized requests for data before a database responds to a query.

"We have shifted the thinking from data filtering to query filtering," said Dongwon Lee, assistant professor in Penn State's School of Information Sciences and Technology (IST). "This is a practical solution to the ongoing problem of database access controls."

Businesses and organizations know a critical security guarantee for their databases is that only authorized users can access approved data. That security is managed currently through access control-modules built separately into individual databases.

QFilter can implement database security without those modules. This means it can be used with off-the-shelf databases and without requiring substantial changes to existing databases, the researchers said.

"That difference not only makes the security check of QFilter very practical, but it also significantly improves query-response time by rejecting unauthorized requests early on," Lee said.

The technology is discussed in a paper titled "QFilter: Fine-Grained Run-Time XML Access Control via NFA-based Query Rewriting" presented today (Nov. 11) at the ACM Conference on Information and Knowledge Management in Washington, D.C.

Lee's co-authors are Bo Luo, IST doctoral student; Peng Liu, assistant professor of information sciences and technology; and Wang-Chien Lee, associate professor of computer science and engineering at Penn State.

Other technologies for restricting access to databases exist. One popular technique is view-based technology, which creates different data views for each user. Once the views are created, the database no longer has to check users' credentials, so there is a speed advantage. But as the number of users requesting access grows or views need to be updated frequently, this technology will have maintenance and storageissues, the researchers said.

"The issues are what technology is the fastest, what requires the least storage and what requires the least amount of changes to existing databases," Lee said. "Compared to competing techniques, QFilter is better on all three."

To capture and determine who can access what information, QFilter uses a specialized model of computation known as non-deterministic finite automata (NFA). NFA stores a large number of access control policies in an efficient and non-redundant fashion. NFA monitors when users' queries pass through and filters out parts of queries asking for unauthorized access.

Work on QFilter continues as the software is not in its final version, said Lee who anticipates developing other applications for QFilter.

The research was supported partially by the National Science Foundation.


Story Source:

The above story is based on materials provided by Penn State. Note: Materials may be edited for content and length.


Cite This Page:

Penn State. "New Software Developed By Penn State Improves Database Security." ScienceDaily. ScienceDaily, 6 December 2004. <www.sciencedaily.com/releases/2004/11/041123204116.htm>.
Penn State. (2004, December 6). New Software Developed By Penn State Improves Database Security. ScienceDaily. Retrieved March 30, 2015 from www.sciencedaily.com/releases/2004/11/041123204116.htm
Penn State. "New Software Developed By Penn State Improves Database Security." ScienceDaily. www.sciencedaily.com/releases/2004/11/041123204116.htm (accessed March 30, 2015).

Share This


More From ScienceDaily



More Computers & Math News

Monday, March 30, 2015

Featured Research

from universities, journals, and other organizations


Featured Videos

from AP, Reuters, AFP, and other news services

Facebook Building Plane-Sized Drones For Global Internet

Facebook Building Plane-Sized Drones For Global Internet

Newsy (Mar. 27, 2015) Facebook on Thursday revealed more details about its Internet-connected drone project. The drone is bigger than a 737, but lighter than a car. Video provided by Newsy
Powered by NewsLook.com
Robot Returns from International Space Station and Sets Two Guinness World Records

Robot Returns from International Space Station and Sets Two Guinness World Records

Reuters - Light News Video Online (Mar. 27, 2015) The companion robot "Kirobo" returns to earth from the International Space Station and sets two Guinness World Records. Sharon Reich reports. Video provided by Reuters
Powered by NewsLook.com
Smart Bracelet Changes Design With the Touch of a Button

Smart Bracelet Changes Design With the Touch of a Button

Reuters - Innovations Video Online (Mar. 27, 2015) Interactive jewellery that allows users to change designs and doesn&apos;t need charging. Sharon Reich reports. Video provided by Reuters
Powered by NewsLook.com
Twitter's Periscope New Rival for Meerkat

Twitter's Periscope New Rival for Meerkat

Reuters - Business Video Online (Mar. 26, 2015) Twitter has unveiled Periscope, its live-streaming app to rival Meerkat and other emerging apps that have captured the attention of the social media industry. Bobbi Rebell reports. Video provided by Reuters
Powered by NewsLook.com

Search ScienceDaily

Number of stories in archives: 140,361

Find with keyword(s):
Enter a keyword or phrase to search ScienceDaily for related topics and research stories.

Save/Print:
Share:

Breaking News:

Strange & Offbeat Stories


Space & Time

Matter & Energy

Computers & Math

In Other News

... from NewsDaily.com

Science News

Health News

Environment News

Technology News



Save/Print:
Share:

Free Subscriptions


Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader:

Get Social & Mobile


Keep up to date with the latest news from ScienceDaily via social networks and mobile apps:

Have Feedback?


Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions?
Mobile: iPhone Android Web
Follow: Facebook Twitter Google+
Subscribe: RSS Feeds Email Newsletters
Latest Headlines Health & Medicine Mind & Brain Space & Time Matter & Energy Computers & Math Plants & Animals Earth & Climate Fossils & Ruins