RLS Side Channels: Investigating Leakage of Row-Level Security Protected Data Through Query Execution Time

Summary: RLS time-side channels leak restricted-row info via query timing in PostgreSQL and SQL Server. Proposes a data-oblivious scheme for unique keys; analyzes non-unique-key trade-offs; PostgreSQL benchmark shows security with minimal overhead. (summarized by gpt-5-nano on Feb 09 2026)

Paper ID: 6654
Venue: SIGMOD
Year: 2023
Pagerank: 5.3493418e-05
Overall Rank: 8,899 | 38.95%
DOI: 10.1145/3588943

Incoming Non-self Citations Over Time

Authors

1. Chen Dar (Tel Aviv University)
2. Moshik Hershcovitch (Tel Aviv University)
3. Adam Morrison (Tel Aviv University)

BibTeX Citation

@inproceedings{dar_sigmod23,
        title = {{RLS Side Channels: Investigating Leakage of Row-Level Security Protected Data Through Query Execution Time}},
        author = {Dar, Chen and Hershcovitch, Moshik and Morrison, Adam},
        series = {{SIGMOD} '23},
        booktitle = {Proceedings of the {ACM} {SIGMOD} International Conference on Management of Data},
        publisher = {Association for Computing Machinery},
        doi = {10.1145/3588943},
        url = {https://dl.acm.org/doi/10.1145/3588943},
        year = {2023}
}

Incoming Citations (Sorted by Pagerank)

Showing 1 of 1 citing papers.

Rank	Citing Paper	Year	Venue	Pagerank
7,401	Membrane - Safe and Performant Data Access Controls in Apache Spark in the Presence of Imperative Code	2024	VLDB	5.6255291e-05

Outgoing Citations (Sorted by Pagerank)

Showing 0 of 0 cited papers.

Citations counted here include only citations to other VLDB/SIGMOD/CIDR/PODS papers in this database.

Rank	Cited Paper	Year	Venue	Pagerank

Semantically Similar Papers

#	Overall Rank	Paper	Year	Venue
1	7,147	Architecting a Differentially Private SQL Engine	2019	CIDR
2	1,144	PrivateSQL: A Differentially Private SQL Query Engine	2019	VLDB
3	6,705	Efficient Auditing For Complex SQL queries	2011	SIGMOD
4	641	Relational Cloud: A Database-as-a-Service for the Cloud	2011	CIDR
5	9,070	Integrity-based Attacks for Encrypted Databases and Implications	2021	CIDR
6	12,790	A Multi-Purpose Implementation of Mandatory Access Control in Relational Database Management Systems	2004	VLDB
7	6,365	Explainable Security for Relational Databases	2014	SIGMOD
8	12,459	Building Disclosure Risk Aware Query Optimizers for Relational Databases	2010	VLDB
9	5,315	When Query Authentication Meets Fine-Grained Access Control: A Zero-Knowledge Approach	2018	SIGMOD
10	9,838	Don’t Be a Tattle-Tale: Preventing Leakages through Data Dependencies on Access Control Protected Data	2022	VLDB