{'fraction_non_alphanumeric': 0.019352124526714348, 'fraction_numerical': 0.0, 'mean_word_length': 5.066326530612245, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Reasoner-Based Policy Assurance in Database Systems

The widespread use of automated systems to collect, store, and retrieve data in the public, private, and academic sectors has given rise to a large number of databases. Many of these databases contain private, personally identifiable, or sensitive information. In the financial sector, databases store information about bank accounts, trades and company activity that is not suitable for a large audience. In the health services industry, hospitals and insurance companies maintain databases containing confidential patient health data. In the military, databases contain classified and secret data that must remain hidden for reasons of national security. All of these systems share a common need of regulated access to data. Database systems traditionally use some form of access control to enforce policies regarding the data they contain. These policies, a form of rule-based access control, create a control structure that mimics the structure of the database itself. We can restrict access to tables, enable certain views of data, or prohibit access selectively. These systems have two major points of failure. The first is that they require system designers to think about data and security simultaneously. The second is that they often fall short, creating a substantial “gray area” between unlimited access and highly restricted access. In this project, we will apply Semantic Web technologies to a new area, that of policy assurance in database systems. We argue that the logical reasoners of the Semantic Web world are well suited for a more abstract form of rule-based access control. We will define a language that allows us to describe database queries, and their semantics, to both human and automated agents. We will construct a policy framework that enables us to create policies from abstract concepts, and use existing logical reasoners to determine whether or not we are in compliance of these technologies. Finally, we will integrate our system into an existing relational database implementation. Our approach is novel in using Semantic Web technologies for this type of policy checking. The use of access controls in database systems is not new, nor is the use of reasoning systems and forward chaining to make logical deductions. We feel that Semantic Web technologies are well suited to the database