When trying to keep information confidential, an attacker can
often infer some of the information by using statistics.
Extended Description
In situations where data should not be tied to individual users, but a
large number of users should be able to make queries that "scrub" the
identity of users, it may be possible to get information about a user --
e.g., by specifying search terms that are known to be unique to that
user.
Time of Introduction
Architecture and Design
Implementation
Applicable Platforms
Languages
All
Common Consequences
Scope
Effect
Confidentiality
Sensitive information may possibly be leaked through data queries
accidentally.
Likelihood of Exploit
Medium
Demonstrative Examples
Example 1
See the book Translucent Databases for examples.
Potential Mitigations
Phase
Description
This is a complex topic. See the book Translucent Databases for a good
discussion of best practices.
Description
