@inproceedings{30fbfd5b0d56403d90a9c215ac609890,
title = "Anomaly discovery and resolution in MySQL access control policies",
abstract = "Managing hierarchical and fine grained DBMS policies for a large number of users is a challenging task and it increases the probability of introducing misconfigurations and anomalies. In this paper, we present a formal approach to discover anomalies in database policies using Binary Decision Diagrams (BDDs) which allow finer grain analysis and scalability. We present and formalize intra-table and inter-table redundancy anomalies using the popular MySQL database server as a case study. We also provide a mechanism for improving the performance of policy evaluation by upgrading rules from one grant table to another grant table. We implemented our proposed approach as a tool called MySQLChecker. The experimental results show the efficiency of MySQLChecker in finding and resolving policy anomalies.",
keywords = "Access Control, Anomaly Detection, Policy, Policy Analysis",
author = "Mohamed Shehab and Saeed Al-Haj and Salil Bhagurkar and Ehab Al-Shaer",
year = "2012",
doi = "10.1007/978-3-642-32597-7\_47",
language = "English",
isbn = "9783642325960",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
number = "PART 2",
pages = "514--522",
booktitle = "Database and Expert Systems Applications - 23rd International Conference, DEXA 2012, Proceedings",
address = "Germany",
edition = "PART 2",
note = "23rd International Conference on Database and Expert Systems Applications, DEXA 2012 ; Conference date: 03-09-2012 Through 06-09-2012",
}