Privacy-aware access control in XML databases

  • Authors:

  • Anders H. Landberg;J. Wenny Rahayu;Eric Pardede

  • Affiliations:

  • La Trobe University, Melbourne, Australia;La Trobe University, Melbourne, Australia;La Trobe University, Melbourne, Australia

  • Venue:
  • ADC '10 Proceedings of the Twenty-First Australasian Conference on Database Technologies - Volume 104
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

With the growing use of XML for data transfer and data storage across the web, securing XML documents has become an important issue. The XML privacy and data access control issues are especially significant in XML data repositories because they typically store large collections of highly sensitive business data, health information, etc. Protecting privacy by only restricting access to individual nodes in the XML document tree is not sufficient, as combinations of nodes and aggregations thereof can lead to disclosure of sensitive information. Moreover, a mechanism is required to cope with such combined data privacy levels, as they must be validated on query-time. Extending from XML access control models, this paper proposes a privacy-aware access control model for XML with composite security levels, which adds a further level of fine-granularity to existing approaches. In order to enforce these composite security levels, we then introduce a methodology based on path-triggers. Finally, we evaluate the performance of our new approach using three different implementation techniques.