研究人员开发了PCC-SQL，一个旨在通过强制执行列级访问控制来增强文本到SQL应用程序安全性的新颖系统。该系统将策略合规性直接集成到解码过程中，确保用户查询遵守有关数据使用的指定规则。PCC-SQL旨在通过单次解码过程确定性地防止策略违规，在保持高答案覆盖率的同时实现0%的泄露率。 AI
影响 增强了通过SQL查询与敏感数据交互的AI系统的安全性和合规性。
排序理由 详细介绍文本到SQL访问控制新方法的论文。
AI 生成摘要 · Google Gemini · 来自 2 个来源。 我们如何撰写摘要 →
arXiv:2607.12341v1 Announce Type: new Abstract: Text-to-SQL is increasingly deployed across trust boundaries between data providers and users. Such deployment must balance three competing requirements: policy compliance, answer coverage, and bounded cost. Existing approaches typi…
Text-to-SQL is increasingly deployed across trust boundaries between data providers and users. Such deployment must balance three competing requirements: policy compliance, answer coverage, and bounded cost. Existing approaches typically decide refusal based on which columns a qu…