7. Tautologies
• Inject code in one or more conditional
statements so that they always evaluate to
true
SELECT accounts
FROM users
WHERE login = ‘’ or 1=1 --’ AND pass = ‘’
AND pin =
8. What are Anomalies Detection?
• Anomaly is a pattern in the data that does not
conform to the expected behavior
• Also referred to as outliers, exceptions, peculiarities,
surprise, etc.
• Anomalies translate to significant (often critical) real
life entities
– Cyber intrusions
– Credit card fraud
9. Simple Example
Y
• N1 and N2 are
N1 o1
regions of normal O3
behavior
• Points o1 and o2 are
anomalies o2
• Points in region O3 N2
are anomalies
X
10. Real World Anomalies
• Credit Card Fraud
– An abnormally high purchase
made on a credit card
• Cyber Intrusions
– A web server involved in ftp
traffic
12. Definition
• Inferring prohibited information from results of
queries is known as the inference problem
• Inference problem uses an inference channel
• Goal of inference problem is to detect and remove
inference channels
• Inference channel in a database provides a facility to
infer data with a higher classification from a data
with a lower classification
13. Flight ID Cargo Hold Contents Classification
1254 A Boots Unclassified
1254 B Guns Unclassified
1254 C Atomic Top Secret
bomb
1254 D Butter Unclassified
14. Flight ID Cargo Hold Contents Classification
1254 A Boots Unclassified
1254 B Guns Unclassified
1254 D Butter Unclassified
