[Colloquium] Pranav Subramaniam Candidacy Exam/Mar 11, 2024

[Megan Woodward]

This is an announcement of Pranav Subramaniam's Candidacy Exam.
===============================================
Candidate: Pranav Subramaniam

Date: Monday, March 11, 2024

Time: 11 am CST

Location: JCL 298

Remote Location:  https://uchicago.zoom.us/j/95669507805?pwd=Zzc1dXNWWTUzWExvTExDVnE3dzlLdz09<https://urldefense.com/v3/__https://www.google.com/url?q=https:**Auchicago.zoom.us*j*95669507805*pwd*3DZzc1dXNWWTUzWExvTExDVnE3dzlLdz09&sa=D&source=calendar&ust=1709409658199188&usg=AOvVaw3J1920M5HuUwAIxCipnDWW__;Ly8vLz8l!!BpyFHLRN4TMTrA!6vZK--1_MddPjx6ZDcfIvObXGRhAC-eZlvYKvHMqRPPReP-75OYuSD1t0Zxv7Pnq1GyifHfuUso_V4rmoeVIIqaFPgKiDAeky7A$>

Title: Intent-Based Access Control for Databases: Using LLMs to Intelligently Manage Access Control

Abstract: In every enterprise database, administrators must define an access control policy that specifies which users have access to which assets. Access control straddles two worlds: policy (organization-level principles that define who should have access) and process (database-level primitives that actually implement the policy). Assessing and enforcing process compliance with a policy is a manual and ad-hoc task. This paper introduces a new paradigm for access control called Intent-Based Access Control for Databases (IBAC-DB). In IBAC-DB, access control policies are expressed more precisely using a novel format, the natural language access control matrix (NLACM). Database access control primitives are synthesized automatically from these NLACMs. These primitives can be used to generate new DB configurations and/or evaluate existing ones. This paper presents a reference architecture for an IBAC-DB interface, an initial implementation for PostgreSQL (which we call LLM4AC), and initial benchmarks that evaluate the accuracy and scope of such a system. We find that our chosen implementation, LLM4AC, vastly outperforms other baselines, achieving near-perfect F1 scores on our initial benchmarks.

Advisors: Sanjay Krishnan

Committee Members: Michael Franklin, Sanjay Krishnan, and Grant Ho
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20240308/f30f0477/attachment.html>