ACCOn: checking consistency of XML write-access control policies

  • Authors:
  • Loreto Bravo;James Cheney;Irini Fundulaki

  • Affiliations:
  • University of Edinburgh, UK;University of Edinburgh, UK;University of Edinburgh, UK and ICS-FORTH, Greece

  • Venue:
  • EDBT '08 Proceedings of the 11th international conference on Extending database technology: Advances in database technology
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

XML access control policies involving updates may contain security flaws, here called inconsistencies, in which a forbidden operation may be simulated by performing a sequence of allowed operations. ACCOn implements i) consistency checking algorithms that examine whether a write-access control policy defined over a DTD is inconsistent and ii) repair algorithms that propose repairs to an inconsistent policy to obtain a consistent one.