XML secure views using semantic access control

  • Authors:
  • Andrea Rota;Stuart Short;Mohammad Ashiqur Rahaman

  • Affiliations:
  • SAP AG, Corporate Research, Mougins, France;SAP AG, Corporate Research, Mougins, France;SAP AG, Corporate Research, Mougins, France

  • Venue:
  • Proceedings of the 2010 EDBT/ICDT Workshops
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

The OASIS eXtensible Access Control Language (XACML) provides an interoperable tool for writing and enforcing access control policies based on attributes, i.e. characteristics of the entities that take part to the access, such as subjects or actions. Unfortunately, the attribute based approach starts to show its limits when entities exhibit complex relationships, such as semantic relations, which would be easily captured using ontologies instead of attributes. This paper integrates the XACML attribute model with an OWL ontology and describes a practical privacy filtering application able to filter out information from XML documents, according to a set of XACML semantic privacy policies.