Database Inference
This example shows a simple database that attempts to prevent users from querying sensitive information, in this case salaries by name. The only queries allowed are a list of names based on selected values for fields, and average salaries for the selected criteria. However, by structuring queries in a certain manner, sensitive information can be inferred from the results. For example, in the database below, try to find the salaries for Alice, Bob, and Dan.

