Generalized XML security views

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2005, Pages 77-84

  Kuper, Gabriel ^a   Massacci, Fabio ^a   Rassadko, Nataliya ^a  

^a UNIVERSITY OF TRENTO   (Italy)

Author keywords

XML access control; XML views; XPath

Indexed keywords

ALGORITHMS; CONTROL SYSTEM ANALYSIS; DATA REDUCTION; OPTIMIZATION; PUBLIC POLICY; QUERY LANGUAGES; XML;

XML ACCESS CONTROL; XML SECURITY; XML VIEWS; XPATH;

SECURITY OF DATA;

EID: 30644462320     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1063979.1063994     Document Type: Conference Paper

References (18)

1. M. Benedikt, W. Fan, and G. M. Kuper. Structural properties of XPath fragments. In Proceedings of the International Conference on Database Theory, 2003.
2. E. Bertino and E. Ferrari. Secure and selective dissemination of XML documents. ACM Transactions on Information and System Security, 5(3):290-331, 2002.
3. T. Bray, J. Paoli, and C. M. Sperberg-McQueen. Extensible Markup Language (XML) 1.0. W3C, Feb. 1998.
4. S. Cho, S. Amer-Yahia, L. Lakshmanan, and D. Srivastava. Optimizing the secure evaluation of twig queries. In Proceedings of the International Conference on Very Large Data Bases, 2002.
5. J. Clark and S. DeRose. XML Path Language (XPath) Version 1.0. W3C Recommendation. http://www.w3.org/TR/xpath, November 1999.
6. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. A fine-grained access control system for XML documents. ACM Transactions on Information and System Security, 5(2): 169-202, 2002.
7. S. De Capitani di Vimercati and P. Samarati. Access control: Policies, models, and mechanism. In R. Focardi and F. Gorrieri, editors, Foundations of Security Analysis and Design - Tutorial Lectures, volume 2171 of Lecture Notes in Computer Science. Springer-Verlag, 2001.
8. W. Fan, C.-Y. Chan, and M. Garofalakis. Secure XML querying with security views. In Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data, pages 587-598. ACM Press, 2004.
9. I. Fundulaki and M. Marx. Specifying access control policies for XML documents with XPath. In Proceedings of the 9th ACM symposium on Access control models and technologies, pages 61-69. ACM Press, 2004.
10. S. K. Goel, C. Clifton, and A. Rosenthal. Derived access control specification for XML. In Proceedings of the 2nd ACM Workshop On XML Security, pages 1-14. ACM Press, 2003.
11. G. Gottlob, C. Koch, and R. Pichler. Efficient algorithm for processing XPath queries. In Proceedings of the International Conference on Very Large Data Bases, 2002.
12. S. Hada and M. Kudo. XML Access Control Language: Provisional Authorization for XML Documents. http://www.trl.ibm.com/projects/xml/xacl/, 2000.
13. T. F. Lunt, D. E. Denning, R. R. Schell, M. Heckman, and W. R. Shockley. The SeaView security model. IEEE Transactions on Software Engineering, 16(6):593-607, 1990.
14. M. Murata, A. Tozawa, M. Kudo, and S. Hada. XML access control using static analysis. In Proceedings of the 10th ACM conference on Computer and communication security, pages 73-84. ACM Press, 2003.
15. X. Qian. View-based access control with high assurance. In Proceedings of the 15th IEEE Symposium on Security and Privacy, pages 85-93. IEEE Computer Society Press, 1996.
16. P. D. Stachour and B. Thuraisingham. Design of LDV: A multilevel secure relational database management system. IEEE Transactions on Knowledge and Data Engineering, 2(2): 190-209, 1990.
17. A. Stoica and C. Farkas. Secure XML views. In Research Directions in Data and Applications Security, IFIP WG 11.3 Sixteenth International Conference on Data and Applications Security, volume 256, pages 133-146. Kluwer, 2003.
18. J. Wang and S. L. Osborn. A role-based approach to access control for XML databases. In Proceedings of the 9th ACM symposium on Access control models and technologies, pages 70-77. ACM Press, 2004.