
48 ◾ Secure Data Provenance and Inference Control
In the case of statistical databases, Dorothy Denning and others were the first to
study the problem extensively (see Denning 1979). Here the idea is to give out, for
example, averages and sums while protecting the individual pieces of data. e cen-
sus bureau also studied the inference problem in collecting and maintaining census
data. However, it was not until the late 1980s when there were many activities on
multi-level secure database management systems (MLS/DBMSs) that the inference
problem was investigated extensively. Morgenstern (1987) at SRI International,
uraisingham (1987) at Honey