{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T04:45:50Z","timestamp":1784004350745,"version":"3.55.0"},"reference-count":27,"publisher":"Association for Computing Machinery (ACM)","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2011,9]]},"abstract":"<jats:p>\n            To comply with emerging privacy laws and regulations, it has become common for applications like electronic health records systems (EHRs) to collect\n            <jats:italic>access logs<\/jats:italic>\n            , which record each time a user (e.g., a hospital employee) accesses a piece of sensitive data (e.g., a patient record). Using the access log, it is easy to answer simple queries (e.g., Who accessed Alice's medical record?), but this often does not provide enough information. In addition to learning who accessed their medical records, patients will likely want to understand\n            <jats:italic>why<\/jats:italic>\n            each access occurred.\n          <\/jats:p>\n          <jats:p>\n            In this paper, we introduce the problem of generating\n            <jats:italic>explanations<\/jats:italic>\n            for individual records in an access log. The problem is motivated by user-centric auditing applications, and it also provides a novel approach to misuse detection. We develop a framework for modeling explanations which is based on a fundamental observation: For certain classes of databases, including EHRs, the reason for most data accesses can be inferred from data stored elsewhere in the database. For example, if Alice has an appointment with Dr. Dave, this information is stored in the database, and it explains why Dr. Dave looked at Alice's record. Large numbers of data accesses can be explained using general forms called\n            <jats:italic>explanation templates<\/jats:italic>\n            .\n          <\/jats:p>\n          <jats:p>Rather than requiring an administrator to manually specify explanation templates, we propose a set of algorithms for automatically discovering frequent templates from the database (i.e., those that explain a large number of accesses). We also propose techniques for inferring collaborative user groups, which can be used to enhance the quality of the discovered explanations. Finally, we have evaluated our proposed techniques using an access log and data from the University of Michigan Health System. Our results demonstrate that in practice we can provide explanations for over 94% of data accesses in the log.<\/jats:p>","DOI":"10.14778\/2047485.2047486","type":"journal-article","created":{"date-parts":[[2014,6,24]],"date-time":"2014-06-24T12:17:57Z","timestamp":1403612277000},"page":"1-12","source":"Crossref","is-referenced-by-count":28,"title":["Explanation-based auditing"],"prefix":"10.14778","volume":"5","author":[{"given":"Daniel","family":"Fabbri","sequence":"first","affiliation":[{"name":"University of Michigan, Ann Arbor, MI"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kristen","family":"LeFevre","sequence":"additional","affiliation":[{"name":"University of Michigan, Ann Arbor, MI"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2011,9]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Oracle virtual private database (VPD). http:\/\/www.oracle.com.  Oracle virtual private database (VPD). http:\/\/www.oracle.com."},{"key":"e_1_2_1_2_1","unstructured":"Personal communication with the University of Michigan Health System Compliance Office.  Personal communication with the University of Michigan Health System Compliance Office."},{"key":"e_1_2_1_3_1","unstructured":"Cemer Power Chart 2011.  Cemer Power Chart 2011."},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.5555\/1316689.1316735"},{"key":"e_1_2_1_5_1","first-page":"487","volume-title":"VLDB","author":"Agrawal R.","year":"1994"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/645480.655281"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/645504.656274"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1559845.1559901"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1943513.1943524"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1561\/1900000006"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.14778\/1920841.1920851"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.physrep.2009.11.002"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/335191.335372"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1989323.1989396"},{"key":"e_1_2_1_16_1","volume-title":"Washington Post","author":"Kessler G.","year":"2008"},{"key":"e_1_2_1_17_1","volume-title":"SQL Server Technical Article","author":"Kiely D.","year":"2007"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2011.01.007"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2008.4497437"},{"key":"e_1_2_1_20_1","volume-title":"Oracle Magazine","author":"Nanda A.","year":"2004"},{"key":"e_1_2_1_21_1","first-page":"70","article-title":"Analysis of weighted networks","author":"Newman M.","year":"2004","journal-title":"Phys. Rev. E"},{"key":"e_1_2_1_22_1","volume-title":"Los Angeles Times","author":"Ornstein C.","year":"2008"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007631"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.485845"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/276304.276335"},{"key":"e_1_2_1_26_1","volume-title":"March","author":"Wasserman T. J.","year":"2006"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2005.845141"}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/2047485.2047486","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,28]],"date-time":"2022-12-28T10:03:37Z","timestamp":1672221817000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/2047485.2047486"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,9]]},"references-count":27,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2011,9]]}},"alternative-id":["10.14778\/2047485.2047486"],"URL":"https:\/\/doi.org\/10.14778\/2047485.2047486","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2011,9]]}}}