关键词: 起源过滤, 间接依赖, 不确定使用边, 溯源效用, 起源安全

Abstract:

Provenance sanitization is a technique to hide sensitive information to generate secure provenance graphs by redacting the nodes, edges or indirect dependencies in the provenance graph. Existing researches of data sanitization mainly focus on sanitizing nodes and edges, rarely on sanitizing indirect dependencies. To this end, an indirect dependency sanitization method for provenance by extending the existing strategy of “delete and repair” is proposed. Firstly, the uncertain usage edge is defined and the rationale of adopting uncertain usage edges to repair the non-sensitive indirect dependencies that are accidentally broken during hiding a sensitive indirect dependency is articulated. Secondly, a sanitization mechanism for indirect dependency based uncertain usage edges is proposed. This mechanism first disconnects the sensitive indirect dependency by deleting the appropriate usage edge in the sensitive path, and then repairs the insensitive indirect dependencies that have been accidentally broken by introducing appropriate uncertain usage edges while minimizing the sanitization cost. The experimental results show that the proposed method can generate sanitized graphs with higher utility while meeting the typical provenance structural constraints, in comparison with existed sanitization mechanisms.

Key words: provenance sanitization, indirect dependency, uncertain usage edge, provenance utility, provenance security