Design and implementation of an access control processor for XML documents

Computer Networks

Volumn 33, Issue 1, 2000, Pages 59-75

  Damiani, Ernesto ^a   De Capitani Di Vimercati, Sabrina ^b   Paraboschi, Stefano ^c   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

^b UNIVERSITY OF BRESCIA   (Italy)

^c POLITECNICO DI MILANO   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

DATA ACQUISITION; DATA STRUCTURES; HTML; INTERNET; INTRANETS; SECURITY OF DATA; SYSTEMS ANALYSIS;

ACCESS CONTROL SYSTEM; EXTENSIBLE MARKUP LANGUAGE;

PROGRAM PROCESSORS;

EID: 0033723110     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/S1389-1286(00)00053-0     Document Type: Article

References (21)

1. AlphaWorks, XML Security Suite, April 1999, http://www.alphaWorks.ibm.com/tech/xmlsecuritysuite.
2. T. Berners-Lee, R. Fielding and L. Masinter, Uniform Resource Identifiers (URI): Generic Syntax, 1998, http://www.isi.edu/in-notes/rfc2396.txt.
3. F. Buschmann, R. Meunier, H. Rohnert, P. Sommerlad and M. Stal, Pattern-Oriented Software Architecture - A System of Patterns, Wiley, New York, 1996.
4. S. Castano, M.G. Fugini, G. Martella and P. Samarati, Database Security, Addison-Wesley, Reading, MA, 1995.
5. S. Ceri, S. Comai, E. Damiani, P. Fraternali, S. Paraboschi and L. Tanca, XML-GL: A graphical language for querying and restructuring XML documents, in: Proc. 8th International Conference on the World Wide Web, Toronto, May 1999.
6. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi and P. Samarati, Securing XML documents, in: Proc. 2000 International Conference on Extending Database Technology (EDBT2000), Konstanz, March 2000 (in press).
7. B. Gladman, C. Ellison and N. Bohm, Digital signatures, certificates and electronic commerce, http://www.clark.net/pub/cme/html/spki.html.
8. S. Jajodia, P. Samarati, V.S. Subramanian and E. Bertino, A unified framework for enforcing multiple access control policies, in: Proc. 1997 ACM International SIGMOD Conference on Management of Data, Tucson, AZ, May 1997.
9. J. Kahan, WDAI: a simple World Wide Web distributed authorization infrastructure, in: Proc. 8th International World Wide Web Conference, May 1999.
10. S. Lewontin and M.E. Zurko, The DCE project: providing authorizations and other distributed services to the World Wide Web, in: Proc. 2nd World Wide Web Conference, October 1994, http://www.ncsa.uiuc.edu/SDG/IT94/Proceedings/Security/lewontin/Web_DCE_Conf_94. html.
11. T.F. Lunt, Access control policies for database systems, in: C.E. Landwehr (Ed.), Database Security, II: Status and Prospects, North-Holland, Amsterdam, 1989, pp. 41-52.
12. S. Mazzocchi, Cocoon User Manual, http://xml.apache.org/cocoon.
13. J.D. Moffett and M. Sloman, Policies hierarchies for distributed systems management, IEEE Journal of Selected Areas in Communications 11 (9) (1993) 1404-1414.
14. P. Samarati, E. Bertino and S. Jajodia, An authorization model for a distributed hypertext system, IEEE Transactions on Knowledge and Data Engineering 8 (4) (1996) 555-562.
15. Youman, Role-based access control models, IEEE Computer 29 (2) (1996) 38-47.
16. World Wide Web Consortium (W3C), Document Object Model (DOM) Level 1 Specification Version 1.0, October 1998, http://www.w3.org/TR/REC-DOM-Level-1.
17. World Wide Web Consortium (W3C), Document Object Model (DOM) Level 2 Specification Version 1.0., September Working Draft 1999, http://www.w3.org/TR/WD-DOM-Level-2.
18. World Wide Web Consortium (W3C). Extensible Stylesheet Language (XSL) Specification, April 1999, http://www.w3.org/TR/WD-xsl.
19. World Wide Web Consortium (W3C), Resource Description Framework (RDF) Model and Syntax Specification, February 1999, http://www.w3.org/TR/REC-rdf-syntax.
20. World Wide Web Consortium (W3C), XML Path Language (XPath), November 1999, http://www.w3.org/TR/xpath.
21. M.E. Zurko, R. Simon and T. Sanfilippo, A user-centered, modular authorization service built on an RBAC foundation, in: Proc. 20th IEEE Symposium on Security and Privacy, Oakland, May 1999, pp. 57-71.