[转载]On Privacy and the Web

信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

Inference attacks on a user generally assume that the attack is taking place from the perspective of the Database Administrator. It is therefore implicit that there is an intimate knowledge of the database being accessed by the user. Given the nature of the Web and some of the Large Public Databases being accessed via the Web, we wish to determine if inference attacks launched on a user can be successful without detailed knowledge of the database. Can we successfully violate the privacy of a user by analysing his Web queries to the Large Public Database over a period of time? If this is possible, how can one circumvent such an attack?