XML Security Views Revisited

  • Authors:
  • Benoît Groz;Sławomir Staworko;Anne-Cecile Caron;Yves Roos;Sophie Tison

  • Affiliations:
  • Mostrare project, INRIA Lille Nord-Europe & LIFL (CNRS UMR8022), and University of Lille 1, and ENS Cachan,;Mostrare project, INRIA Lille Nord-Europe & LIFL (CNRS UMR8022),;Mostrare project, INRIA Lille Nord-Europe & LIFL (CNRS UMR8022), and University of Lille 1,;Mostrare project, INRIA Lille Nord-Europe & LIFL (CNRS UMR8022), and University of Lille 1,;Mostrare project, INRIA Lille Nord-Europe & LIFL (CNRS UMR8022), and University of Lille 1,

  • Venue:
  • DBPL '09 Proceedings of the 12th International Symposium on Database Programming Languages
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we revisit the view based security framework for XML without imposing any of the previously considered restrictions on the class of queries, the class of DTDs, and the type of annotations used to define the view. First, we show that the full class of Regular XPath queries is closed under query rewriting . Next, we address the problem of constructing a DTD that describes the view schema, which in general needs not be regular. We propose three different methods of approximating the view schema and we show that the produced DTDs are indistinguishable from the exact schema (with queries from a class specific for each method). Finally, we investigate problems of static analysis of security access specifications.