A model of XML access control with dual-level security views

Authors:
Wei Sun;Da-xin Liu;Tong Wang
Affiliations:
College of Computer Science and Technology, Harbin Engineering University, Harbin, Heilongjiang Province, China;College of Computer Science and Technology, Harbin Engineering University, Harbin, Heilongjiang Province, China;College of Computer Science and Technology, Harbin Engineering University, Harbin, Heilongjiang Province, China
Venue:
APWeb'06 Proceedings of the 2006 international conference on Advanced Web and Network Technologies, and Applications
Year:
2006

Citing 9
Cited 0

Role-Based Access Control Models

Computer
A fine-grained access control system for XML documents

ACM Transactions on Information and System Security (TISSEC)
Secure and selective dissemination of XML documents

ACM Transactions on Information and System Security (TISSEC)
Securing XML Documents

EDBT '00 Proceedings of the 7th International Conference on Extending Database Technology: Advances in Database Technology
XML access control using static analysis

Proceedings of the 10th ACM conference on Computer and communications security
Specifying access control policies for XML documents with XPath

Proceedings of the ninth ACM symposium on Access control models and technologies
Secure XML querying with security views

SIGMOD '04 Proceedings of the 2004 ACM SIGMOD international conference on Management of data
Optimizing the secure evaluation of twig queries

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
Controlling access to published data using cryptography

VLDB '03 Proceedings of the 29th international conference on Very large data bases - Volume 29

Quantified Score

Hi-index	0.00

Visualization

Abstract

XML becomes a standard format for data interchanges on Internet, especially in E-commerce. Although XML technology has been widely used, the research and development on XML security is still at the early stage. The control of XML access is important for protecting XML documents from being illegally modified or accessed. Most of available models utilize a single level check point. In this paper, we proposed an access control model with dual level access control: file-level and element-level (or attribute-level). The model allows adopt the XBLP policy with file-level security, while employs Hide-Node View for element-level security. The architecture framework of the access control model and implementation are briefly described.