Derived access control specification for XML

Authors:
Siddhartha K. Goel;Chris Clifton;Arnon Rosenthal
Affiliations:
Purdue University, West Lafayette, IN;Purdue University, West Lafayette, IN;The MITRE Corporation, Bedford, MA
Venue:
Proceedings of the 2003 ACM workshop on XML security
Year:
2003

Citing 10
Cited 10

Design and implementation of an access control processor for XML documents

Proceedings of the 9th international World Wide Web conference on Computer networks : the international journal of computer and telecommunications netowrking
XML document security based on provisional authorization

Proceedings of the 7th ACM conference on Computer and communications security
A fine-grained access control system for XML documents

ACM Transactions on Information and System Security (TISSEC)
An authorization model for temporal XML documents

Proceedings of the 2002 ACM symposium on Applied computing
Specifying and enforcing access control policies for XML document sources

World Wide Web
Controlling Access to XML Documents

IEEE Internet Computing
Author-X: A Java-Based System for XML Data Protection

Proceedings of the IFIP TC11/ WG11.3 Fourteenth Annual Working Conference on Database Security: Data and Application Security, Development and Directions
Regulating access to XML documents

Das'01 Proceedings of the fifteenth annual working conference on Database and application security
Derived access control specification for XML

Proceedings of the 2003 ACM workshop on XML security
Compressed accessibility map: efficient access control for XML

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases

Derived access control specification for XML

Proceedings of the 2003 ACM workshop on XML security
Generalized XML security views

Proceedings of the tenth ACM symposium on Access control models and technologies
Structural signatures for tree data structures

Proceedings of the VLDB Endowment
Access control system to XML databases: a framework

IMSA '07 Proceedings of the Eleventh IASTED International Conference on Internet and Multimedia Systems and Applications
XML repository searcher-browser supporting fine-grained access control

International Journal of Computers and Applications
Query rewriting algorithm evaluation for XML security views

SDM'07 Proceedings of the 4th VLDB conference on Secure data management
Privacy-aware access control in XML databases

ADC '10 Proceedings of the Twenty-First Australasian Conference on Database Technologies - Volume 104
Effectively and efficiently selecting access control rules on materialized views over relational databases

Proceedings of the Fourteenth International Database Engineering & Applications Symposium
Inheriting access control rules from large relational databases to materialized views automatically

KES'10 Proceedings of the 14th international conference on Knowledge-based and intelligent information and engineering systems: Part III
XML-Based declarative access control

SOFSEM'05 Proceedings of the 31st international conference on Theory and Practice of Computer Science

Quantified Score

Hi-index	0.00

Visualization

Abstract

The growth in interchange of business and other sensitive data has led to increasing interest in access control. While broad-based access control may be adequate for library-style document bases, new applications demand different access rights on different documents, or different parts of a document. Methods have been developed that enforce fine-grained access control in XML, but the administrative complexity of hard-coding rules is still a challenge. We present an XQuery-based approach for deriving access control rules from schemalevel rules, document or database content, or rules on other documents. This approach provides a novel capability to exploit non-structural information in broadly-applicable rules, making it feasible to specify data- and context-dependent rules for large document sets.