Systems Security Certified Practitioner – SSCP – Question0399

Which of the following is used in database information security to hide information?

A.
Inheritance
B. Polyinstantiation
C. Polymorphism
D. Delegation

Correct Answer: B

Explanation:

Polyinstantiation enables a relation to contain multiple tuples with the same primary keys with each instance distinguished by a security level. When this information is inserted into a database, lower-level subjects need to be restricted from this information. Instead of just restricting access, another set of data is created to fool the lower-level subjects into thinking that the information actually means something else. Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 11: Application and System Development (page 727).