CAREER: XML Middleware for Privacy-Preserving Database Publishing

这个项目旨在帮助数据所有者处理以有用而可控的方式在Web上以XML形式发布专有数据的日益增长的需求。一个主要的推动力是开发工具，允许数据发布者检查敏感数据的隐私不会被暴露给外部视图的内容无意中侵犯（即使是以间接的方式）。发布者通过针对专有模式的秘密查询S指定敏感数据，工具检查攻击者是否无法从发布的数据计算出S的答案（准确或近似地）。研究方法包括开发一个隐私保证层次结构，由逼近的准确性和攻击者的计算资源来限定。第二个项目目标是提供一些工具，用于将web发布与当前“web服务”技术支持的有限查询接口集成在一起。重点是web服务，它实现了大量参数化XML查询。该项目寻求以下解决方案：(1)使用简洁、直观的可视化范例实现查询集规范；(2)将客户端查询重写为执行计划，只调用受支持的查询。已开发的技术将使在网络上发布数据的所有类别的数据所有者受益，从商业/政府/学术机构到个人。一些工具将作为本科和研究生数据库课程的教材，也将作为UCSD编译器课程的教材。软件和课程材料将免费分发，用于非商业目的。项目网站http://www.db.ucsd.edu/people/alin/nsf-career将用于传播结果。

This project aims to help data owners deal with the ever-increasing demand of publishing proprietary data on the Web as XML, in useful yet controlled ways. One major thrust is the development of tools allowing data publishers to check that the privacy of sensitive data is not inadvertently violated by what is exposed to the outside view (even in indirect ways). The publisher specifies the sensitive data via a secret query S against the proprietary schema and the tools check that attackers cannot compute the answer to S (exactly or approximately) from the published data. The research approach includes development of a hierarchy of privacy guarantees, qualified by the accuracy of the approximation and the attacker's computational resources. The second project goal is the delivery of tools for integrating web publishing with the limited query interfaces supported by current "web services" technologies. The focus is on web services, which implement large sets of parameterized XML queries. The project seeks solutions for (i) the query set specification using concise, intuitive visual paradigms and (ii) the rewriting of client queries to execution plans, which invoke only supported queries. The developed technologies will benefit all categories of data owners who publish on the Web, from commercial/governmental/academic institutions to private individuals. Some tools will serve as course materials for undergraduate and graduate database classes, but also for a compiler class at UCSD. Software and course materials will be freely distributed for non-commercial purposes. The project Web site http://www.db.ucsd.edu/people/alin/nsf-career will be used for the results dissemination.