inference

A type of threat action that reasons from characteristics or byproducts of communication and thereby indirectly accesses sensitive data, but not necessarily the data contained in the communication. (See: traffic analysis, signal analysis.)

A type of threat action that indirectly gains unauthorized access to sensitive information in a database management system by correlating query responses with information that is already known.