Towards Collaborative Query Planning in Multi-party Database Networks
Multi-party distributed database networks require secure and decentralized query planning services. In this work, we propose the collaborative query planning (CQP) service that enables multiple parties to jointly plan queries and controls sensitive information disclosure at the same time. We conduct several simulated experiments to evaluate the performance characteristics of our approach compared to other planning schemes, and also study the trade-off between information confidentiality and query plan efficiency. The evaluation shows that when sharing more than 30 % of query planning information between coalition parties, the CQP service is able to generate reasonably efficient query plans. We also outline potential improvements of the CQP service at the end.
KeywordsInformation confidentiality Multi-party database network Optimization
We would like to thank Dr. Alessandra Russo and the anonymous reviewers for their valuable comments and suggestions. This research was sponsored by the U.S. Army Research Laboratory and the U.K. Ministry of Defence and was accomplished under Agreement Number W911NF-06-3-0001. The views and conclusions contained in this document are those of the author(s) and should not be interpreted as representing the official policies, either expressed or implied, of the U.S. Army Research Laboratory, the U.S. Government, the U.K. Ministry of Defence or the U.K. Government. The U.S. and U.K. Governments are authorized to reproduce and distribute reprints for Government purposes notwithstanding any copyright notation hereon.
- 1.Bent, G., Dantressangle, P., Vyvyan, D., Mowshowitz, A., Mitsou, V.: A dynamic distributed federated database. In: Second Annual Conference of ITA, Imperial College, London (2008)Google Scholar
- 2.Cheng, P.-C., Rohatgi, P., Keser, C., Karger, P.A., Wagner, G.M., Reninger, A.S.: Fuzzy multi-level security: an experiment on quantified risk-adaptive access control. In: 2007 IEEE Symposium on Security and Privacy, SP 2007, pp. 222–230. IEEE (2007)Google Scholar
- 3.De Capitani di Vimercati, S., Foresti, S., Jajodia, S., Paraboschi, S., Samarati, P.: Authorization enforcement in distributed query evaluation. J. Comput. Secur. 19(4), 751–794 (2011)Google Scholar
- 5.Farnan, N.L., Lee, A.J., Chrysanthis, P.K., Yu, T.: Paqo: preference-aware query optimization for decentralized database systems. In: IEEE 30th International Conference on Data Engineering (ICDE) (2014)Google Scholar
- 6.Farnan, N.L., Lee, A.J., Yu, T.: Investigating privacy-aware distributed query evaluation. In: Proceedings of the 9th Annual ACM Workshop on Privacy in the Electronic Society, pp. 43–52. ACM (2010)Google Scholar
- 9.Le, M., Kant, K., Jajodia, S.: Consistent query plan generation in secure cooperative data access. In: Atluri, V., Pernul, G. (eds.) DBSec 2014. LNCS, vol. 8566, pp. 227–242. Springer, Heidelberg (2014) Google Scholar
- 10.Özsu, M.T., Valduriez, P.: Principles of Distributed Database Systems. Springer, New York (2011) Google Scholar
- 11.Papadimos, V., Maier, D.: Distributed queries without distributed state. In: Proceedings of WebDB 2002, pp. 95–100 (2002)Google Scholar
- 13.Stonebraker, M., Devine, R., Kornacker, M., Litwin, W., Pfeffer, A., Sah, A., Staelin, C.: An economic paradigm for query processing and data migration in mariposa. In: 1994 Proceedings of the Third International Conference on Parallel and Distributed Information Systems, pp. 58–67. IEEE (1994)Google Scholar