Auditing Interval-based Inference

• Main Authors: LI, Yingjiu, WANG, Lingyu, WANG, X. Sean, Jajodia, Sushil
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2002
• Subjects: Audit; Usability; Feasibility; Mathematical programming; Database; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/1047; http://dx.doi.org/10.1007/3-540-47961-9_38
• Institution: Singapore Management University

In this paper we study the feasibility of auditing interval-based inference. Sensitive information about individuals is said to be compromised if an accurate enough interval, called inference interval, is obtained into which the value of the sensitive information must fall. Compared with auditing exact inference that is traditionally studied, auditing interval-based inference is more complicated. Existing auditing methods such as audit expert do not apply to this case. Our result shows that it is intractable to audit interval-based inference for bounded integer values; while for bounded real values, the auditing problem is polynomial yet involves complicated computation of mathematical programming. To further examine the practicability of auditing interval-based inference, we classify various auditing methods into three categories: exact auditing, optimistic auditing, and pessimistic auditing. We analyze the trade-offs that can be achieved by these methods among various auditing objectives: inference security, database usability, and auditing complexity.