We Know What You Did Last Session: Policy-Based Query Classification for Data-Privacy Compliance With the DataEconomist

This paper explains the demonstration of the DataEconomist, a framework for policy-based SQL query classification according to data-privacy directives. Our framework automatically derives query meta-information based on query-log analysis and provides user-friendly, graphical interfaces for browsing and filtering queries based on this meta-information. We aim to complement existing data-privacy approaches and enable privacy officers to define domain-specific compliance policy rules based on the graphical filter mechanisms. Policies automatically classify queries as compliant or non-compliant regarding their processing of personal data. During our demonstration, conference attendees assess our system in several scenarios. They filter queries based on various query meta-information, learn how to define compliance policies for automatic query classification without profound technical knowledge, and test this classification by formulating non-compliant queries.

• Publication year

  2020

• Venue

  International Conference on Statistical and Scientific Database Management

• Publication date

  2020-07-07

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/3400903.3401692
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• A Framework for DSL-Based Query Classification Using Relational and Graph-Based Data Models

  2020cited by this paper
• Query-Driven Data Minimization with the DataEconomist

  2019cited by this paper
• Query-Driven Enforcement of Rule-Based Policies for Data-Privacy Compliance

  2019cited by this paper
• Apache Calcite: A Foundational Framework for Optimized Query Processing Over Heterogeneous Data Sources

  2018cited by this paper
• Crossing an OCEAN of queries: analyzing SQL query logs with OCEANLog

  2018cited by this paper
• Transparent Personal Data Processing: The Road Ahead

  2017cited by this paper
• Qapla: Policy compliance for database-backed systems

  2017cited by this paper
• Personal Data Management with the Databox: What's Inside the Box?

  2016cited by this paper
• Automatic Enforcement of Data Use Policies with DataLawyer

  2015cited by this paper
• The Gremlin graph traversal machine and language (invited talk)

  2015cited by this paper
• SELECT triggers for data auditing

  2013cited by this paper
• Transforming Privacy Policies to Auditing Specifications

  2011cited by this paper
• Efficient auditing for complex SQL queries

  2011cited by this paper
• Policy auditing over incomplete logs: theory, implementation and applications

  2011cited by this paper
• Explanation-Based Auditing

  2011cited by this paper
• Auditing SQL Queries

  2008cited by this paper
• Online detection of malicious data access using DBMS auditing

  2008cited by this paper
• A Unified Audit Expression Model for Auditing SQL Queries

  2008cited by this paper
• Compliance with data protection laws using Hippocratic Database active enforcement and auditing

  2007cited by this paper
• Auditing Compliance with a Hippocratic Database

  2004cited by this paper
• Hippocratic Databases

  2002cited by this paper
• Security-control methods for statistical databases: a comparative study

  1989cited by this paper
• Statistical Databases: Characteristics, Problems, and some Solutions

  1982cited by this paper
• Secure statistical databases with random sample queries

  1980cited by this paper

• Performance Evaluation of Policy-Based SQL Query Classification for Data-Privacy Compliance

  2021cites this paper
• Towards Evolutionary, Domain-Specific Query Classification Based on Policy Rules

  2020cites this paper