Secure mediation: Requirements, design, and architecture

Journal of Computer Security

Volumn 11, Issue 3, 2003, Pages 365-398

  Altenschmidt, C ^a   Biskup, J ^a   Flegel, U ^a   Karabulut, Y ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

DATA COMMUNICATION SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; INFORMATION RETRIEVAL SYSTEMS; INTERNET; MANAGEMENT INFORMATION SYSTEMS; MULTIMEDIA SYSTEMS; NETWORK PROTOCOLS; PUBLIC KEY CRYPTOGRAPHY;

MEDIATED INFORMATION SYSTEMS; MULTIMEDIA MEDIATOR;

SECURITY OF DATA;

EID: 0038613719     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2003-11306     Document Type: Article

References (49)

1. C. Altenschmidt, J. Biskup, J. Freitag and B. Sprick, Weakly constraining multimedia types based on a type embedding ordering, in: Proceedings of the 4th International Workshop on Multimedia Information Systems, Istanbul, Turkey, 1998, pp. 121-129.
2. C. Altenschmidt, J. Biskup and Y. Karabulut, Security architecture of the Multimedia Mediator, in: Data and Application Security: Developments and Directions, Proceedings of the 14th Annual IFIP WG 11.3 Working Conference on Database Security, Schoorl, Holland, 2000, Kluwer Academic Press, 2001, pp. 77-87.
3. Y. Arens, C.A. Knoblock and W. Shen, Query reformulation for dynamic information integration, Journal of of Intelligent Information Systems 6(2/3) (1996).
4. 2, Morgan Kaufmann, San Mateo, CA, 1992.
5. R.J. Bayardo et al., InfoSleuth: Agent-based semantic integration of information in open and dynamic environments, in: SIGMOD '97, Tucson, AZ, USA, 1997, pp. 195-206.
6. E. Bertino, F. Buccafurri, E. Ferrari and P. Rullo, An authorization model and its formal semantics, Journal of Computer Security 8(2/3) (2000), 109-140.
7. J. Biskup, U. Flegel and Y. Karabulut, Secure mediation: requirements and design, in: Database Security, XII: Status and Prospects, Proceedings of the 12th Annual IFIP WG 11.3 Working Conference on Database Security, Chalkidiki, Greece, 1998, Kluwer Academic Press, 1999, pp. 127-140.
8. J. Biskup, U. Flegel and Y. Karabulut, Towards secure mediation, in: 1st Workshop on Sicherheit und Electronic Commerce, Essen, Germany, 1998, Vieweg-Verlag, 1999, pp. 93-106.
9. J. Biskup, J. Freitag, Y. Karabulut and B. Sprick, A mediator for multimedia systems, in: Proceedings of the 3rd International Workshop on Multimedia Information Systems, Como, Italy, 1997, pp. 145-153.
10. J. Biskup, J. Freitag, Y. Karabulut and B. Sprick, Query evaluation in an object-oriented Multimedia Mediator, in: Proceedings of the 4th International Conference on Object-Oriented Information Systems, Brisbane, Australia, Springer-Verlag, 1997, pp. 31-43.
11. M. Blaze, J. Feigenbaum and A. Keromytis, The KeyNote trust management system version 2, RFC 2704, IETF, Sept. 1999.
12. G. Bleumer and M. Schunter, Privacy oriented clearing for the german health-care system, in: Personal Information Security, Engineering and Ethics, R. Anderson, ed., Springer-Verlag, 1997, pp. 175-194.
13. G. Booch, I. Jacobson and J. Rumbaugh, The Unified Modeling Language User Guide, Addison-Wesley, 1998.
14. S.A. Brands, Rethinking Public Key Infrastructures and Digital Certificates: Building in Privacy, The MIT Press, 2000.
15. K.S. Candan, S. Jajodia and V.S. Subrahmanian, Secure mediated databases, in: 12th International Conference on Data Engineering, S.Y.W. Su, ed., New Orleans, Louisiana, USA, IEEE, IEEE Computer Society Press, 1996, pp. 28-37.
16. M.J. Carey et al., Towards heterogeneous multimedia information systems: The Garlic approach, in: Proceedings of the Fifth International Workshop on Research Issues in Data Engineering (RIDE): Distributed Object Management, Los Angeles, California, 1995, pp. 123-130.
17. R.G.G. Cattell and D. Barry, eds, The Object Data Standard: ODMG 3.0, Morgan Kaufmann, San Francisco, 2000.
18. D. Chaum, Security without identification: Transaction systems to make big brother obsolete, Communications of the ACM 28(10) (1985), 1030-1044.
19. F. Cuppens and A. Gabillon, Rules for designing multilevel object-oriented databases, in: Proceedings of the 5th European Symposium on Research in Computer Security (ESORICS '98), number 1485 in LNCS, J.-J. Quisquater, Y. Deswarte, C. Meadows and D. Gollmann, eds, Louvain-la-Neuve, Belgium, 1998, Springer-Verlag, pp. 159-174.
20. S. Dawson, S. Qian and P. Samarati, Providing security and interoperation of heterogeneous systems, Distributed and Parallel Databases 8(1) (2000), 119-145.
21. S.D.C. di Vimercati and P. Samarati, Authorization specification and enforcement in federated database systems, Journal of Computer Security 5(2) (1997), 155-188.
22. C. Ellison, SPKI/SDSI certificates, http://world.std.com/~cme/html/spki.html, Aug. 2001.
23. C.M. Ellison, B. Frantz, B. Lampson, R. Rivest, B.M. Thomas and T. Ylonen, Simple public key certification, Internet draft, work in progress, http://www.ietf.org/ids.by.wg/spki.html, June 1999.
24. T. Finin, Y. Labrou and J. Mayfield, KQML as an agent communication language, in: Software Agents, J.M. Bradshaw, ed., MIT Press, Cambridge, 1997. http://www.cs.umbc.edu/kqml/papers/.
25. B. Gladman, C. Ellison and N. Bohm, Digital signatures, certificates and electronic commerce. http://jya.com/bg/digsig.pdf, April 1999.
26. D. Heimbigner and D. McLeod, A federated architecture for information management, ACM Transactions on Office Information Systems 3(3) (1985), 253-278.
27. R. Hull and G. Zhou, A framework for supporting data integration using the materialized and virtual approaches, in: ACM SIGMOD '96, ACM, Montreal, Canada, 1996, pp. 481-492.
28. IETF X.509 Working Group, Public-key infrastructure (X.509). http://www.ietf.org/html.charters/pkix-charter.html, 1998.
29. S. Jajodia, P. Samarati, V. Subrahmanian and E. Bertino, A unified framework for enforcing multiple access control policies, in: SIGMOD '97, Tucson, AZ, USA, 1997, pp. 474-485.
30. D. Jonscher, Access control in object-oriented federated database systems, PhD thesis, University of Zurich, Department of Computer Science, Zurich, May 1998, DISDBIS 49, Infix-Verlag.
31. D. Jonscher and K.R. Dittrich, Argos - a configurable access control system for interoperable environments, in: Database Security, IX: Status and Prospects, Proceedings of the 9th Annual IFIP WG 11.3 Working Conference on Database Security, Rensselaerville , New York, 1995, pp. 43-60.
32. A.Y. Levy, A. Rajaraman and J.J. Ordille, Querying heterogeneous information sources using source descriptions, in: Proceedings of 22nd International Conference on Very Large Data Bases VLDB '96, Mumbai (Bombay), India, Morgan Kaufmann, 1996, pp. 251-262.
33. W. Litwin, L. Mark and N. Roussopoulos, Interoperability of multiple autonomous databases, ACM Computing Surveys 22(3) (1990), 267-293.
34. L. Liu and C. Pu, Distributed interoperable object model and its application to large-scale interoperable database systems, in: Proceedings of ACM International Conference on Information and Knowledge Management (CIKM '95), 1995.
35. E. Mena, V. Kashyap, A. Sheth and A. Illarramendi, OBSERVER: an approach for query processing in global information systems based on interoperation across pre-existing ontologies, in: First IFCIS International Conference on Cooperative Information Systems (CoopIS '96), Brussels, Belgium, IEEE Computer Society Press, 1996, pp. 14-25.
36. Object Management Group, The common object request broker, architecture and specification, CORBA, 2.3.1/IIOP specification, http://www.omg.org/library/c2indx.html, Dec. 1998.
37. M. Olivier and S. von Solms, A taxonomy for secure object-oriented databases, ACM Transactions on Database Systems 19(1) (1994), 3-46.
38. R.L. Rivest, L. Adleman and M.L. Dertouzos, On data banks and privacy homomorphisms, in: Foundations of Secure Computation, R. DeMillo et al., eds, Academic Press, New York, 1978, pp. 169-177.
39. K.E. Seamons, W. Winsborough and M. Winslett, Internet credential acceptance policies, in: Proceedings of the Workshop on Logic Programming for Internet Applications, Leuven, Belgium, 1997.
40. A.P. Sheth and J.A. Larson, Federated database systems for managing distributed, heterogeneous, and autonomous databases, ACM Computing Surveys 22(3) (1990), 183-236.
41. V.S. Subrahmanian, S. Adali, A. Brink, R. Emery et al., HERMES: Heterogeneous reasoning and mediator system, http://www.cs.umd.edu/projects/hermes/publications/publications.html.
42. Z. Tari and G. Fernandez, Security enforcement in the DOK federated database system, in: Database Security, X: Status and Prospects, Proceedings of the 10th IFIP WG 11.3 Working Conference on Database Security, P. Samarati and R.S. Sandhu, eds, Como, Italy, Chapman & Hall, 1997, pp. 23-42.
43. A. Tomasic, L. Raschid and P. Valduriez, Scaling heterogeneous databases and the design of DISCO, in: Proceedings of the International Conference on Distributed Computer Systems, Hong Kong, 1995.
44. J.D. Ullman, Information integration using logical views, in: Proceedings of the 6th International Conference on Database Theory, ICDT '97, number 1186 in LNCS, Delphi, Greece, Springer-Verlag, Berlin, 1997, pp. 19-40.
45. N.R. Wagner, P.S. Putter and M.R. Cain, Encrypted database design: specialized approaches, in: IEEE Symposium on Security and Privacy, 1986, pp. 148-153.
46. G. Wiederhold, Mediators in the architecture of future information systems, IEEE Computer 25(3) (1992), 38-49.
47. G. Wiederhold, M. Bilello and C. Donahue, Web implementation of a security mediator for medical databases, in: Database Security, XI: Status and Prospects, Proceedings of the 11th Annual IFIP WG 11.3 Working Conference on Database Security, T.Y. Lin and S. Qian, eds, Lake Tahoe, California, IFIP, Chapman & Hall, 1998, pp. 60-72.
48. G. Wiederhold and M. Genesereth, The conceptual basis for mediation, IEEE Expert, Intelligent Systems and their Applications 12(5) (1997), 38-47.
49. L.L. Yan, T. Özsu and L. Liu, Accessing heterogeneous data through homogenization and integration mediators, in: Second IFCIS Conference on Cooperative Information Systems (CoopIS '97), Charleston, South Carolina, 1997, pp. 130-139.